topic Re: Wi-Fi - Azure AD (AAD) Authentication + Per-vlan assigment in ExtremeWireless (Identifi)

Wi-Fi - Azure AD (AAD) Authentication + Per-vlan assigment

leonarit — Fri, 16 Oct 2020 05:44:51 GMT

Hi,

I would like to ask if anyone knows if its possible to use only Extreme hardware/software to do a Wi-Fi deployment were a single SSID will be using Azure AD for user authentication and also have the possibility to map a specific user/group to a specfic vlan/group policy

Currently I’m using Cisco gear with a radius server cloud provider(ironwifi) that uses Azure AD as user db backend, but would like to know if Extreme any kind of native AAD integration.

Best regards.

Re: Wi-Fi - Azure AD (AAD) Authentication + Per-vlan assigment

StephanH — Fri, 16 Oct 2020 12:29:50 GMT

Hello leonarit,

native Identifi only supports Radius for external authentication and can’t speak directly to the AD/LDAP. To connect an AD you need for example an radius server or Extreme-NAC.

Regards

Stephan

Re: Wi-Fi - Azure AD (AAD) Authentication + Per-vlan assigment

leonarit — Fri, 16 Oct 2020 21:05:57 GMT

Hi StephanH, the Azure AD doesn’t support LDAP, it’s based on a Azure service that’s only accessible through some type specific connectors (OpenId Connect,etc).

I was told by someone that has Extreme knowledge that it was possible, i will try to check with the someone form product management.

Best regards.

Re: Wi-Fi - Azure AD (AAD) Authentication + Per-vlan assigment

StephanH — Fri, 16 Oct 2020 21:43:41 GMT

Hello leonarti,

sorry for the confusion. I just wanted to say that Identifi cannot speak directly to Azure.

AD/LDAP was just an example.

Since Identifi controllers (your anser was posted in the Identifi channel therefore I asume your question is about Identifi products) and APs are already tagged with an EoS date, these devices will not speak to Azure in the future.

This might be implemented in the future only for XCC or CloudIQ. Here I do not know any plans.

As of May 2020 there was not support for NAC and XCC (=XCA). See here:

https://extremeportal.force.com/ExtrArticleDetail?n=000039180&q=azure

Regards

Stephan

Re: Wi-Fi - Azure AD (AAD) Authentication + Per-vlan assigment

JonasD_Complit — Wed, 25 Nov 2020 00:55:12 GMT

With Extremecloudiq we have an integration with Azure based on ppsk. You can doe segmentation based on vlans. Have a look at: https://wiflex.eu/wifionboarder-gsuite-azure/