Event banner
Event details
For strong cert mapping changes does it impact devices that are Microsoft Entra joined only? The blog post discusses hybrid joined for Windows devices being impacted.
- For device certificates, only Microsoft Entra hybrid joined devices will have SID information, so strong mapping changes are applicable only to Windows devices that are Microsoft Entra hybrid joined. For other device types, like iOS or Android, strong mapping is not supported for device certificates, and user certificates should be used instead.
From blog post: Support tip: Implementing strong mapping in Microsoft Intune certificates
This MS article also suggests it only affects HAADJ computers:
https://learn.microsoft.com/en-us/mem/intune/fundamentals/in-development#plan-for-change-implement-strong-mapping-for-scep-and-pkcs-certificates
- Jason_Sandys
Microsoft
This is correct since the strong mapping changes are for on-prem AD only and Entra joined devices and any certificates that are issued to them are not related to on-prem AD.
