Migrate the active directory services from onpremise to EntraID (Azure),

[Alpalo]

Hello team

We want to migrate active directory services from onpremise to EntraID (Azure), how can we integrate the UserAgent in Palo Alto?

Greetings

[JayGolf]

Hi @Alpalo ,

Hope you’re doing well! The User-ID Agent isn’t compatible with Azure AD because it relies on traditional LDAP. I recommend looking into Cloud Identity Engine (CIE). You can link directly to Azure AD for group membership. Then you can use SAML for auth and implement captive portal or GP internal gateway to collect user attributes. If you and your org can swing it, setting up an internal gw is a solid choice. If not, captive portal has less overhead. 

Hope this helps! Feel free to PM me if you'd like to talk more in depth about it.