How Can I join an on-premise RADIUS server to Azure AD without having active directory on-premise

Question

Hi

i'd like to link my on-prem RADIUS server with AAD , my active directory on Azure. is there any way to do this way?

Answer 1

Hello @mohammed shankar !

Welcome to Microsoft QnA!

For a Radius Server to work you can do it only with Azure Domain Services

Azure AD Domain Services provides managed domain services such as domain join, group policy, LDAP, and Kerberos/NTLM authentication. You need to enable AAD DS in your Azure environment.

Azure AD does not support the Radius implementation

If you could provide more details on the purpose we may provide a way but in general LDAP is not supported on Azure AD - Entra ID , only via Azure Domain Services

https://azure.microsoft.com/en-us/products/active-directory-ds

https://learn.microsoft.com/en-au/azure/active-directory-domain-services/tutorial-configure-ldaps

---

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Hi Mohammad,

Yes you can try the handing off authentication requests via the Radius to Azure AD and check the configuration process here - https://learn.microsoft.com/en-us/entra/architecture/auth-radius

Hope this helps.

JS

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.

Answer 3

Hello @mohammed shankar !

In that case you can integrate using the NPS Extension

https://learn.microsoft.com/en-us/entra/architecture/auth-radius

Use when: 

You need to add multifactor authentication to applications like

• a Virtual Private Network (VPN)
• WiFi access
• Remote Desktop Gateway (RDG)
• Virtual Desktop Infrastructure (VDI)
• Any others that depend on the RADIUS protocol to authenticate users into the service.

Note

Rather than relying on RADIUS and the Microsoft Entra multifactor authentication NPS extension to apply Microsoft Entra multifactor authentication to VPN workloads, we recommend that you upgrade your VPN’s to SAML and directly federate your VPN with Microsoft Entra ID. This gives your VPN the full breadth of Microsoft Entra ID Protection, including Conditional Access, multifactor authentication, device compliance, and Identity Protection.

---

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards