Map IP Addresses to Users - Azure-AD Cloud Identity User ID

[Metgatz]

Map IP Addresses to Users - Azure-AD Cloud Identity User ID

Good afternoon, thank you for your time and cooperation.

I understand that it is possible to apply the Mapping of groups, etc, but example:

If I have Workstations integrated to Azure AD totally in cloud, no on-premises AD server, none, just added to the domain in Azure of the endpoints, is it possible to have User ID- Map IP Addresses to Users in this kind of environments ? where everything is practically in Cloud ? The idea is to be able to just like on-premises environments, where you can map the IP to the user, through the AD/LDAP server, to have the same but through Azure.

Is it possible and technically feasible ?

Thank you, I remain attentive

Best regards

[TomYoung]

Hi @Metgatz ,

I agree.  More and more companies are moving to Azure, and it would be very nice to have an easy way to get user-to-ip mappings.  Digging into the CIE docs, it looks like the authentication portal is recommended there.  That doesn't really work well for non-web apps.

Thanks,

Tom

[raji_toor]

@Metgatz I am assuming you are having remote users who have Azure AD joined systems. This is what I have been wanting in our environment, mapping external IP addresses authenticated to Azure AD. I don't think CIE does that. It just pulls the user/group information as this is the only scope that is given to the application in Azure.

Other method would be to use authentication policies but I am waiting for input from the community if exposing external interface for response pages to be exposed on the external interface is seen as an issue or not. I think threat would be of the same level as exposing Global Protect portal to publicly.

@TomYoung  What do you think of it