Authenticate AD Azure in SOPHOS

There may be some help here: http://www.checkyourlogs.net/?p=52993

Hello,

You may try to connect VPN using this KBA. When you do connect you can add a AD server that would integrate with Sophos XG using this KBA.

Thank you all for your help.

I do not have AD VM.

I am accessing my Azure AD just using a browser.

So there is no way for me to add Server AD IP address.

Can you sync your on premise AD with azure AD?

Yes, I can Sync.

But until now, I can sync only one way, from my On Premise AD to Azure AD.

I already have Azure AD users created before creating my On premise AD.

You could sync the Azure Ad user to onpremise ad with the use of powershell scripting.

Then sophos would authenticate with on premise.

have a loook here

Thank you for your help.

I will try this then update.

We did it with enabling LDAPS on azure https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-admin-guide-configure-secure-ldap .

After that you can just add it as a ldap auth server.

hey jesse,

same problem here. we would likt to sync/authenticate our users (for VPN authentication) via LDAPS directly with azure ad.

If I understand you right, it is no azure VM (Domaincontroller with AD) necessary?

So we need an activated azure plan like P1 and only the certification for ldaps, right?

thanks & regars

phil

We can connect to Azure AD with LDAPs with Anonymous. Bind DN worked as well. If we Chose the authentication with credentials (it doesn‘t work).

Login in the User Portal with an AD User is not possible.

After a call with Sophos technician today they will check if LDAPs via WAN works.

Jess, may be you could give me some more Information how do you realized the Connection with ldaps. Do you use a VPN to the Azure Network.

Regards

Philipp