Support usecase when Azure AD enforces device compliance checks

[sectra-masve]

Is there an existing request for this feature?

• I have searched the existing issues and found none that matched mine

Describe the feature

Enterprise users of Azure AD will typically enforce device compliance checking, and non-compliant devices will not be allowed to authenticate. Ubuntu users can install the intune-portal package to implemnet device compliance checking.

However, there is no Ubuntu version that supports both intune-portal (being able to prove device compliance) and aad-auth.

intune-portal supports ubuntu 20.04 LTS and 22.04 LTS. aad-auth supports 23.04/23.10.

Describe the ideal solution

There are ubuntu versions compatible with both device compliance checking (intune-portal) and aad-auth.

Alternatives and current workarounds

There are no workarounds if you want to use supported versions only.

Ubuntu users: System information and logs

No response

Non Ubuntu users: System information and logs

Environment

• aad-auth version: please run aad-cli version
• Distribution: (NAME in /etc/os-release)
• Distribution version: (VERSION_ID on /etc/os-release):

Log files

Please redact/remove sensitive information:

aad-auth logs can be found in the system journal and queried with:
`journalctl | grep _aad`

Application settings

Please redact/remove sensitive information:

You can get the configuration file from /etc/aad.conf

Relevant information

No response

Double check your logs

• I have redacted any sensitive information from the logs