How to setup and use NPS and/or RADIUS server with AAD/Entra ID only as we don't have on-premise AD/AD DS in our company and we wanted to setup this across the company?

Question

How to setup and use NPS and/or RADIUS server with AAD/Entra ID only as we don't have on-premise AD/AD DS in our company and we wanted to setup this across the company?

Mytoast Admin 285

Is it possible or not if yes then how we can do it if not then what are the ways to do it?

3 answers

Your answer

Answer 1

Raja Pothuraju 23,465 Microsoft External Staff Moderator

Hello @Mytoast Admin,

Thank you for posting your query on Microsoft Q&A.

Based on your description, I understand that you are trying to set up NPS and RADIUS authentication with Microsoft Entra ID, but you don't have an on-premises Active Directory and are looking for alternative methods to configure this without it.

Unfortunately, it is not possible to configure a Network Policy Server (NPS) as a RADIUS server without an on-premises Active Directory. The NPS server role must be installed on an on-premises AD, and users must be synced to Microsoft Entra ID to enable multi-factor authentication with RADIUS-based systems. This is done by installing the Microsoft Entra multi-factor authentication NPS extension on the Windows NPS server.

For more information, please refer to the following documents:

NPS Extension for Multi-Factor Authentication

RADIUS Authentication with Entra

How to Configure NPS Extension with RD Gateway

User's image

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know. Thanks,
Raja Pothuraju.

Mytoast Admin 285 Reputation points

2024-08-13T06:22:50.4266667+00:00

Raja Pothuraju

Thanks for reply on this.

I found this link on Azure Marketplace how does this work in this case if you can share some details around this

https://cloudinfrastructureservices.co.uk/how-to-setup-radius-server-2016-2019-in-azure-for-wireless-authentication
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-08-14T19:01:43.52+00:00

Hello @Mytoast Admin,

Thank you for your response.

I have reviewed the document you shared. The steps outlined for configuring NPS with Active Directory and creating RADIUS authentication all need to be completed within Active Directory (on-premises). This requires having Active Directory/AD DS in place.

Thanks,
Raja Pothuraju.
Mytoast Admin 285 Reputation points

2024-08-15T04:54:59.5966667+00:00

Raja Pothuraju

Thanks means we should have on-prem AD and then install NPS on top of it then setup RADIUS there right
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-08-15T07:50:19.8466667+00:00

@Mytoast Admin,

Yes, you are correct. We should establish an on-premises AD, then configure the NPS role on that server, followed by setting up RADIUS.
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-08-16T12:09:30.13+00:00

Hello @Mytoast Admin,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2024-08-19T17:25:55.2+00:00

Hello @Mytoast Admin,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Answer 2

Michel S 0

Hi

I guess you can do it with Azure AD DS.. deploy Azure AD DS in your tenant (Now Entra ID Directory Services) then deploy a Windows server with NPS on it in the same VNET subnet in Azure.. send you Radius requests to that VM over a S2S tunnel for added security from your Radius clients.

Mytoast Admin 285 Reputation points

2024-09-24T16:59:17.9233333+00:00

if you have any docs or details you can share for the same.

Answer 3

Michel S 0

Hi

Sure, here, this guy did it already, planning to follow suite

https://blog.keithng.com.au/2021/04/12/azure-ad-radius/

Share via

How to setup and use NPS and/or RADIUS server with AAD/Entra ID only as we don't have on-premise AD/AD DS in our company and we wanted to setup this across the company?

3 answers

Your answer