Strong Certificate Mapping enforcement pushed back to 2025

Posted by RiceeeChrispies@reddit | sysadmin | View on Reddit | 1 comments

People who use certificates for Intune through the NDES connector faced a cliff-edge situation in November ‘23 - as there is no official way to strongly map a certificate from an offline request (which NDES generates). These certificates are generally used for Wi-Fi and VPN authentication, so quite a big issue. They have [something in preview](https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/preview-of-san-uri-for-certificate-strong-mapping-for-kb5014754/ba-p/3789785), but no updates since April. This has now been [pushed back to February 11, 2025](https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16). Rejoice slightly? Although that’s quite a big pushback.