Forum Discussion
Azure Virtual Desktop - Per User External User Licensing?
- Both remote apps and desktops can be accessed by the external users. There is an extra cost for allowing access to desktops over only allowing remote app access. More info can be found here: https://docs.microsoft.com/en-us/azure/virtual-desktop/remote-app-streaming/licensing
JasonMasten One this is licensed, do you have the process of how the external users connect to AVD? Thanks in advanced.
Microsoftjanzhang AVD does not support B2B or B2C yet. The identities remain the same as any other AVD deployment, they must exist in ADDS and Azure AD. More info can be found here: Set up managed identities in Azure Virtual Desktop - Azure | Microsoft Docs
- You are saying AVD does not support B2B yet. Does this mean that B2B support is coming? If this is planned, any estimate when?
- JasonMastenAK1 Please refer to the public Roadmap website to find feature development and release dates: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=Windows%20Virtual%20Desktop%2CIn%20development
- Given the external users need to be created under the same ADDS and Azure AD within the tenant of where the AVD deployment will be, how does Microsoft identify the difference between "internal" and "external" users?
janzhang External uses in AAD always have a UPN that indicates this.
So if I invite mailto:mwolfson@microsoft.com to my tenant as a Guest account (meaning they will authenticate to their own AAD and provide my tenant a token their UPN from my AAD tenant will be
mwolfson_microsoft.com#EXT#@mdwsoft.onmicrosoft.com
Pretty easy to distinguish and further you wouldn't have an AD identity if you are using Hybrid Join as most AVD customers use today, meaning the VM is joined to the domain and AD credentials on the VM must match the UPN in AAD.- JasonMastenjanzhang yes, your link is correct. Once the user has been assigned to an app group, they will be able to connect with the client. When you enroll your subscription for Remote App Streaming, any user connecting to AVD in that subscription will be charged for the Remote App Streaming service. So you would be billed double if you deploy your internal users to the same subscription.
- Thanks Jason so technically those users are not external users/Guest users. Inviting guest(external) users to our Azure AD, and assign them to WVD app group is still not possible?
- Thanks Jason. In that case, in terms of connecting to the AVD Application from the external user side, I assume the steps are the same as below?
https://docs.microsoft.com/en-gb/azure/virtual-desktop/user-documentation/connect-windows-7-10?toc=/azure/virtual-desktop/remote-app-streaming/toc.json&bc=/azure/virtual-desktop/breadcrumb/toc.json
