Use Azure Active Directory as RADIUS server for VPN gateway?

radius azure-active-directory azure-networking

11,381

Ok so I am guessing you want everything hosted on cloud and dont have an existing servers NPS, Radius etc, so what you will have to do is download the MFA Server and host it on an azure VM. From the FMA console you can then launch a RADIUS server.

Sadly Azure AD with MFA dos have a radius server it just has the authentication of the uses.

or if you want a truly cloud based system you can use one of the multi tenanted radius servers attached to your azure ad.

It's crazy that there isn't one join the surggestion group.

https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/8816272-authenticating-wireless-access-points-radius-thr

11,381

Herb Caudill

Herb is the founder and CTO of DevResults, a web app for managing foreign aid projects. DevResults is intended to make international development, grant-making, humanitarian assistance, and disaster relief programs more effective. It includes tools for monitoring & evaluation, mapping, project management, and collaboration.

Updated on September 18, 2022

Comments

Herb Caudill almost 2 years

I'm using Azure Active Directory (Premium, with full MFA). I've set up a VPN gateway and would like users to be able to authenticate to it using their Azure AD username and password (instead of certificates).

From everything I read, this should be possible - Azure MFA provides a RADIUS server, and the Azure VPN Gateway can connect to a RADIUS server.

But I can't figure out how to do fit - in the gateway's P2S configuration, I need to provide an IP address and a secret. Where would I get those for the Azure AD MFA server?
- Wayne Yang over 6 years
  
  Hi, Herb, have you referred this document?docs.microsoft.com/en-us/azure/vpn-gateway/…
- Herb Caudill over 6 years
  
  Yes, this assumes a stand-alone RADIUS server. ("If you don’t have a RADIUS server deployed, deploy one. For deployment steps, refer to the setup guide provided by your RADIUS vendor.") I could install MS MFA on a VM but I'd rather not have that added complexity.
- Nicolas Mommaerts over 6 years
  
  did you manage to find a solution to this?