topic Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices in Firewall and Security Management

Identity Awareness / Identity Collector and Azure AD / Autopilot devices

JordanF — Thu, 03 Nov 2022 15:57:22 GMT

Hello,

We are going to deploy Identity Awareness with Identity collector solution to collect users information.
This solution seems to be efficient for a large scale enterprise who use standard AD. But we are also moving to Azure AD with Autopilot devices.

How does IDA fit into this environment ? I can see it is compatible with captive portal, but this one is not a solution for us.
Do we have a way to collect identities from Azure AD as the collector do ?

Thank you.

Regards,
Jordan

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

PhoneBoy — Thu, 03 Nov 2022 18:11:38 GMT

Identity Collector only works with on-premise AD, to the best of my knowledge.
@Royi_Priov can you or someone on your team confirm?

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

CheckPointerXL — Fri, 04 Nov 2022 08:56:09 GMT

+1 to the question

My case is a little bit different, customer wanna deploy IC on win server to Azure and pull/push identities from/to gateway/AD-on-prem

what do you think about this design?

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

_Val_ — Fri, 04 Nov 2022 09:38:57 GMT

Unfortunately, Azure AD is not part of the supported sources for Identity Collector. Here is the quote from sk108235

The identities are collected from these servers:

Microsoft Active Directory Domain Controllers:
- Windows Server 2008
- Windows Server 2008 R2
- Windows Server 2012
- Windows Server 2012 R2
- Windows Server 2016
- Windows Server 2019
- Windows Server 2022
Cisco Identity Services Engine (ISE) Servers, versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.6, 2.7, 3.0, and 3.1
Syslog messages (requires R80.20 Security Gateway)
NetIQ eDirectory 8.8 (requires R80.20 Security Gateway)

You can raise an RFE with your local Check Point office

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

f_wild15 — Wed, 25 Oct 2023 13:48:01 GMT

Anyone with this use case ?

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

Jones — Thu, 21 Dec 2023 11:22:49 GMT

I'm facing a similar case. Did your design work like you suggested?

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

f_wild15 — Thu, 21 Dec 2023 20:31:31 GMT

Hi,

Yes it's working well.
Windows servers are deployed in Azure with Identity Collector installed on them (like you do onprem)

Ensure that you open all flows in Azure (Firewalls + NSG) if needed

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

Jones — Fri, 22 Dec 2023 10:17:08 GMT

Hi, did you also use the Windows server in Azure with the Identity Collector to connect to Azure AD solution or only to the onprem AD?

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

f_wild15 — Fri, 22 Dec 2023 13:54:51 GMT

As _Val_ mentionned below, AzureAD is not supported in Identitty Collector.

I am only collecting from Active Directory servers with my IA servers installed in Azure.

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

Darren_Fine — Mon, 23 Jun 2025 08:01:15 GMT

Hi Guys,

Just a question here - is Infinity Identity not the solution here ?

I know its EA - and have not tried it - asking ?

Thanks

Re: Identity Awareness / Identity Collector and Azure AD / Autopilot devices

Royi_Priov — Mon, 23 Jun 2025 09:49:00 GMT

Hi @Darren_Fine

Indeed, from the time this thread was opened, we have worked on Infinity Identity, and it answers this requirement perfectly.

If you want to evaluate it, feel free to contact me privately.