Migrate the active directory services from onpremise to EntraID (Azure),

Alpalo — Wed, 09 Oct 2024 11:29:17 GMT

Hello team

We want to migrate active directory services from onpremise to EntraID (Azure), how can we integrate the UserAgent in Palo Alto?

Greetings

Re: Migrate the active directory services from onpremise to EntraID (Azure),

JayGolf — Wed, 16 Oct 2024 18:46:58 GMT

Hi @Alpalo ,

Hope you’re doing well! The User-ID Agent isn’t compatible with Azure AD because it relies on traditional LDAP. I recommend looking into Cloud Identity Engine (CIE). You can link directly to Azure AD for group membership. Then you can use SAML for auth and implement captive portal or GP internal gateway to collect user attributes. If you and your org can swing it, setting up an internal gw is a solid choice. If not, captive portal has less overhead.

Hope this helps! Feel free to PM me if you'd like to talk more in depth about it.

topic Re: Migrate the active directory services from onpremise to EntraID (Azure), in General Topics

Migrate the active directory services from onpremise to EntraID (Azure),

Re: Migrate the active directory services from onpremise to EntraID (Azure),