Security

 View Only

  • 1.  Clearpass Authentication with Entra ID

    Posted Jul 25, 2025 10:22 AM

    Dear Experts, 

    I am new to Entra ID (Azure AD). Customer has given us the root CA and we have given them the CSR for Clearpass. They have client certificate installed on their laptop devices. Now they just want to authenticate the user based on their certs and give them internet access. Rest of the security is managed through Fortigate etc. 

    In this case do i need to integrate CPPM with Entra ID? or it will be able to do the authentication just fine?



    ------------------------------
    Owais101
    ------------------------------


  • 2.  RE: Clearpass Authentication with Entra ID

    Posted Jul 25, 2025 10:38 AM

    Integration with EntraID is just for authorization reasons, not for authentication purposes. 

    When you have added the root and intermediate CA of the clients to ClearPass (and trust them for EAP) you are good to go. Make sure to disable Authorization within the EAP method.

    Without authorizatoin this setup will allow each client with a signed certificate by the root CA to authenticate. It's also advisable to configure CRL / OCSP checking for the certificates. Next to that, the EntraID integration will help to validate the computer/users existence in EntraID.



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------



  • 3.  RE: Clearpass Authentication with Entra ID

    Posted Jul 25, 2025 10:46 AM
    Thanks alot William, 

    By any chance do you have any good resource/tutorial that walks through the process of integration (although not required in this setup). I tried multiple times but couldnt get azure account for trial, so cannot check in lab

    Best Regards




    Original Message


  • 4.  RE: Clearpass Authentication with Entra ID

    Posted Jul 25, 2025 11:10 AM
    Edited by WB-eb0f78 Jul 25, 2025 11:10 AM

    Please check this post and the ClearPass documentation.

    Herman created this presentation about integration between ClearPass and EntraID.



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------

    Original Message


Related Content