Authenticate AD Azure in SOPHOS

We did it with enabling LDAPS on azure https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-admin-guide-configure-secure-ldap .

After that you can just add it as a ldap auth server.

We can connect to Azure AD with LDAPs with Anonymous. Bind DN worked as well. If we Chose the authentication with credentials (it doesn‘t work).

Login in the User Portal with an AD User is not possible.

After a call with Sophos technician today they will check if LDAPs via WAN works.

Jess, may be you could give me some more Information how do you realized the Connection with ldaps. Do you use a VPN to the Azure Network.

Regards

Philipp

Hey Kresimir,

 answer from sophos support:

"I got this discussed with my Senior team and I regret to inform but Authentication is not supported on WAN Zone as of now on the XG Firewall.

But as a workaround, you can create an IPSec Tunnel and then use Authentication."

 So you have to create a vnet in azure with azureadomain-service, vm windowsserver (join domain & install ad-tools), gateway & vpn.

Regards

Philipp

Hey Kresimir,

 answer from sophos support:

"I got this discussed with my Senior team and I regret to inform but Authentication is not supported on WAN Zone as of now on the XG Firewall.

But as a workaround, you can create an IPSec Tunnel and then use Authentication."

 So you have to create a vnet in azure with azureadomain-service, vm windowsserver (join domain & install ad-tools), gateway & vpn.

Regards

Philipp

Hi all,

We've managed to get this to work properly.

Trick is that you need to properly parse bind and base DNs. Bind DN must be spelled without base DN.

Bind DN user must be in format like this: CN=ldapbind,OU=AADDC users 

Base DN must be in format like this: OU=contoso,OU=com

Hope this will solve your problem.

Best regards,

Kresimir