NDES

Certificate Based Authentication

1. Azure Active Directory and Office365
   1. https://docs.microsoft.com/en-gb/azure/active-directory/authentication/active-directory-certificate-based-authentication-get-started

SCEP

Setup

1. https://blogs.msdn.microsoft.com/canberrapfe/2016/06/13/scep-certificate-deployment-troubleshooting-reference/
2. https://blogs.technet.microsoft.com/tune_in_to_windows_intune/2014/04/25/part-2-scep-certificate-enrolling-using-configmgr-2012-crp-ndes-and-windows-intune/
3. https://docs.microsoft.com/en-us/previous-versions/orphan-topics/ws.11/dn744315(v=ws.11)
4. http://www.scconfigmgr.com/2016/04/12/prepare-your-environment-for-scep-certificate-enrollment-with-microsoft-intune/
5. https://social.technet.microsoft.com/wiki/contents/articles/485.how-to-publish-the-crl-on-a-separate-web-server.aspx

Troubleshooting

1. https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Troubleshooting-a-Common-Intune-SCEP-and-NDES-Server/ba-p/280133
2. https://github.com/microsoftgraph/powershell-intune-samples/tree/master/CertificationAuthority