GetToTheCloud

Azure | Secure Azure Virtual Desktop with MFA !!UPDATE!!

Alex ter Neuzen 1 min read

In April 2023 I wrote already about how to add MFA to Azure Virtual Desktop in Azure | Secure Azure Virtual Desktop with MFA (gettothe.cloud). Here I wrote how to add MFA to login for Azure Virtual Desktop. In the most recent post: Azure Virtual Desktop | SSO for Entra Joined AVD – GetToTheCloud I wrote how to Enable SSO for Azure Virtual Desktop. But something is changing in this front.

26 June 2024#

Microsoft is changing the cloud app for the conditional access policy. Originally this would be done in April 2024 but it was extended by Microsoft. At first it was just the client app: Azure Virtual Desktop. Now with SSO enabled this will be:

  • Microsoft Remote Desktop Entra ID
  • Windows Cloud Login Entra ID

Microsoft announcement:

What to change#

In your Conditional Access policy as written in Azure | Secure Azure Virtual Desktop with MFA (gettothe.cloud) you now have as Target Resource Azure Virtual Desktop. This needs to be changed to:

That’s it !