Share via

How to setup and use NPS and/or RADIUS server with AAD/Entra ID only as we don't have on-premise AD/AD DS in our company and we wanted to setup this across the company?

Mytoast Admin 300 Reputation points
2024-08-10T13:05:59.69+00:00

How to setup and use NPS and/or RADIUS server with AAD/Entra ID only as we don't have on-premise AD/AD DS in our company and we wanted to setup this across the company?

Is it possible or not if yes then how we can do it if not then what are the ways to do it?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michel S 0 Reputation points
    2024-09-24T17:01:15.4633333+00:00

    Hi

    Sure, here, this guy did it already, planning to follow suite

    https://blog.keithng.com.au/2021/04/12/azure-ad-radius/

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Michel S 0 Reputation points
    2024-09-24T13:31:05.0766667+00:00

    Hi

    I guess you can do it with Azure AD DS.. deploy Azure AD DS in your tenant (Now Entra ID Directory Services) then deploy a Windows server with NPS on it in the same VNET subnet in Azure.. send you Radius requests to that VM over a S2S tunnel for added security from your Radius clients.

    Was this answer helpful?

    1 person found this answer helpful.
  3. Raja Pothuraju 47,420 Reputation points Microsoft External Staff Moderator
    2024-08-12T20:57:34.12+00:00

    Hello @Mytoast Admin,

    Thank you for posting your query on Microsoft Q&A.

    Based on your description, I understand that you are trying to set up NPS and RADIUS authentication with Microsoft Entra ID, but you don't have an on-premises Active Directory and are looking for alternative methods to configure this without it.

    Unfortunately, it is not possible to configure a Network Policy Server (NPS) as a RADIUS server without an on-premises Active Directory. The NPS server role must be installed on an on-premises AD, and users must be synced to Microsoft Entra ID to enable multi-factor authentication with RADIUS-based systems. This is done by installing the Microsoft Entra multi-factor authentication NPS extension on the Windows NPS server.

    For more information, please refer to the following documents:

    NPS Extension for Multi-Factor Authentication

    RADIUS Authentication with Entra

    How to Configure NPS Extension with RD Gateway

    User's image

    I hope this information is helpful. Please feel free to reach out if you have any further questions.

    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know. Thanks,
    Raja Pothuraju.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.