Authenticate AD Azure in SOPHOS

Question

Hello Team,

I need your help please.
Is there any way to authenticate in Sophos AD Azure Users.
I have a hybrid infrastructure, with users in AD Onpermise and in AD Azure.
I was able to authenticate user in my AD Onpermise to access VPN Through Sophos but I do not know what to do regarding AD Azure Users.

Thank you for your help.

This thread was automatically locked due to age.

JuergenB · Accepted Answer

You could sync the Azure Ad user to onpremise ad with the use of powershell scripting. 
 Then sophos would authenticate with on premise. 
 have a loook here

Jesse Bower · Answer

We did it with enabling LDAPS on azure https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-admin-guide-configure-secure-ldap . 
 After that you can just add it as a ldap auth server.

Aditya Patel · Answer

Hello, 
 You may try to connect VPN using this KBA . When you do connect you can add a AD server that would integrate with Sophos XG using this KBA .

Kresimir Fotivec · Answer

Hi all, 
 We've managed to get this to work properly. 
 Trick is that you need to properly parse bind and base DNs. Bind DN must be spelled without base DN. 
 Bind DN user must be in format like this: CN=ldapbind,OU=AADDC users 
 Base DN must be in format like this: OU=contoso,OU=com 
 
 Hope this will solve your problem. 
 
 Best regards, 
 Kresimir