Summary of ISE Integration with Intune MDM

00:00:00 - 00:55:00

This video discusses the integration between Intune MDM and ISE, focusing on the new features and enhancements in Ice 3.1. It covers the topics of registration, enrollment, autopilot, the Intune Certificate Connector, and compliance checking. The video also includes a demonstration of the integration and troubleshooting tips.

• 00:00:00 This video discusses the integration between Ice 3.1 and Intune MDM, focusing on enhancements made in Ice 3.1 around that integration. The presenter discusses traditional versus Azure ID, and notes that Azure AD now supports different device types, including company and personal endpoints.
• 00:05:00 With Intune MDM, companies can manage policy for registered and joined devices using Windows 10, iOS, Mac OS, and Android. Registration options vary based on the device's asset type, and enrollment can be done through company portals or Microsoft's Authenticator app. Windows 10 and Apple devices are supported with autopilot, while Windows 7 and 8.1 require an MSI software package.
• 00:10:00 This video discusses the integration of Intune with ISE. ISE is used to register devices with Azure ID, and Intune then uses this information to push policy to the devices. It also explains the difference between a "hybrid" Azure AD join and a "pure" Azure AD join.
• 00:15:00 The Intune Certificate Connector allows for the enrollment of certificates on behalf of users or devices, and is important for the proper integration of identity and security features in Microsoft Azure AD.
• 00:20:00 This video discusses the integration of Intune with ISE, discussing the traditional compliance challenges that Intune MDM can help with. ISE's certificate connector is used to connect to the MDM, and once the user has been enrolled and their mac address has been registered with the MDM, the Intune MDM will use that mac address to check the user's compliance status. With the new Intune API version 3, the MDM can also use attributes other than the mac address to identify the user's device. If the mac address is no longer registered with the MDM, or the mac address has changed, the user's compliance status may be inaccurate.
• 00:25:00 This 1-minute video describes how Intune's ISE Integration with Intune MDM enables the use of a compliance guide in certificates used for authentication and authorization. The video also covers the deprecation of the older Mac API version, which will end in 2018.
• 00:30:00 With ISE Integration with Intune MDM, administrators can authenticate users with standard Windows authentication methods, such as NTLM, EAP-TLS, and Kerberos, and also use Teep, a new eep type, to tie the user and computer credential together. This allows administrators to author different authorization policies based on user and machine success or failure.
• 00:35:00 ISE Integration with Intune MDM allows for authentication of sessions based on the validity of certificates and membership in a group. Compliance checks can be performed against an administrator-defined list of attributes.
• 00:40:00 The presenter demonstrates how Intune MDM can be used to check that an identity is valid against on-premises AD, as well as e-mail and device compliance checks. In addition, they show how to use Intune's certificate management features to match a certificate against an Azure Active Directory identity.
• 00:45:00 The video discusses issues with integration of Intune with ISE, and how to troubleshoot them. It shows how to find issues with compliance status, and how to fix them by using configuration profiles and managing network profiles.
• 00:50:00 The video demonstrates how to check if an IsE integration with Intune is compliant and how to troubleshoot if there is a problem.
• 00:55:00 The presenter discusses how to integrate ISE with Intune MDM, describing the various licensing requirements and how to use Intune 365 licenses with ISE.