Security

Would somebody be able to provide clarification on the following - as I'm seeing conflicting statements: 

-If using the ClearPass Intune SCEP extension you don't also need an NDES server in between ClearPass and Intune? 

-The Onboard CA can be integrated without compatibility issues with Intune when using SCEP? I've seen some information stating that only ADCS can be integrated with Intune? 

-If only using the Onboard CA to sign client certificates, this still consumes a license? Even if the device is not 'onboarded' via ClearPass Onboard? 

How relevant is this document and is there anything else up to date? Microsoft Intune Onboard Enrollment Extension

Thanks!  

The link you've provided is the current guide for what you seem to be trying to do.

Every certificate provided by the Onboard service, regardless of method used for provisioning the certificate, is subject to the license agreement and the necessary licensing for using Onboard.