Identity Awareness / Identity Collector and Azure AD / Autopilot devices

[JordanF]

Hello,

We are going to deploy Identity Awareness with Identity collector solution to collect users information.
This solution seems to be efficient for a large scale enterprise who use standard AD. But we are also moving to Azure AD with Autopilot devices.

How does IDA fit into this environment ? I can see it is compatible with captive portal, but this one is not a solution for us.
Do we have a way to collect identities from Azure AD as the collector do ?

Thank you.

Regards,
Jordan

[PhoneBoy]

Identity Collector only works with on-premise AD, to the best of my knowledge.
@Royi_Priov can you or someone on your team confirm?

[CheckPointerXL]

+1 to the question

My case is a little bit different, customer wanna deploy IC on win server to Azure and pull/push identities from/to gateway/AD-on-prem

what do you think about this design?

[f_wild15]

Anyone with this use case ? 

[Jones]

I'm facing a similar case. Did your design work like you suggested?

[f_wild15]

Hi, 

Yes it's working well. 
Windows servers are deployed in Azure with Identity Collector installed on them (like you do onprem)

Ensure that you open all flows in Azure (Firewalls + NSG) if needed

[Jones]

Hi, did you also use the Windows server in Azure with the Identity Collector to connect to Azure AD solution or only to the onprem AD?

[f_wild15]

As _Val_ mentionned below, AzureAD is not supported in Identitty Collector. 

I am only collecting from Active Directory servers with my IA servers installed in Azure. 

[Darren_Fine]

Hi Guys,

Just a question here - is  Infinity Identity not the solution here ?

I know its EA - and have not tried it - asking ?

Thanks

[Royi_Priov · Accepted solution]

Hi @Darren_Fine 

Indeed, from the time this thread was opened, we have worked on Infinity Identity, and it answers this requirement perfectly.

If you want to evaluate it, feel free to contact me privately.

[_Val_]

Unfortunately, Azure AD is not part of the supported sources for Identity Collector. Here is the quote from sk108235

The identities are collected from these servers:

• Microsoft Active Directory Domain Controllers:
  - Windows Server 2008
  - Windows Server 2008 R2
  - Windows Server 2012
  - Windows Server 2012 R2
  - Windows Server 2016
  - Windows Server 2019
  - Windows Server 2022
• Cisco Identity Services Engine (ISE) Servers, versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.6, 2.7, 3.0, and 3.1
• Syslog messages (requires R80.20 Security Gateway)
• NetIQ eDirectory 8.8 (requires R80.20 Security Gateway)

You can raise an RFE with your local Check Point office