Forum Discussion
WVD Single Sign On / Double Authentication
Microsoftjcookintegy : We are working on validating and releasing documentation for the single sign-on configuration with ADFS (which has been a little delayed). Unfortunately, this is the only mechanism for a true single sign-on mechanism at the moment, because in the other flows we never see the credentials that you pass to Azure AD (only Azure AD sees them). This issue is averted when using ADFS, since your own authority is issuing the the token and can then later exchange that token for a smartcard certificate for logon.
Christian_Montoya Is there an update on this topic?
Our customers are not satisfied with this situation at all.
Christian_Montoya Is a SSO solution in sight? Would be much appreciated!!
Yes we are curious as well, as we have azure sso and hybrid enabled but can’t seem to find the special sauce, if it exists. Thanks!
Christian_Montoya
- Hello, many Azure AD customers try to phase out ADFS and try to use Passwordless and go Cloud only as much as possible. Also deploying Windows Hello for Business is not an option anymore as it requires one or another on-premise environment. Would be good to have a "light" solution for WVD that uses SSO, so can easily go Passwordless and stay independent from ADFS.
Christian_Montoya Can you please provide more details on the ADFS SSO for WVD. Has the documentation been released yet, or are there any scripts to help us get this setup. We too would like to avoid the extra sign-ins.
Thanks!
- Hi, thanks very much for taking the time to reply. This is unfortunate as we are trying to phase out ADFS for our customers! (as seems to be the general direction in Microsoft) - Can you tell me if there's anything on the roadmap for WVD to support a more modern authentication approach / direct to Azure AD?
Thanks, Jameslooking forward to the modernized feature.
- Is there any new to this feature?
I don’t find it on the roadmap.
- Christian_Montoya
jcookintegy : Yes, we have it in our backlog. We're investigating the work with Azure AD so we don't have a specific timeframe for it yet, but it one of the top concerns across the board, so we are definitely prioritizing this.
Also, jcookintegy , can you go ahead and create or upvote a feedback item at our UserVoice. Thanks!
Hi Christian_Montoya , we have users who are independent therapists contracted to provide services. Their only IT is a laptop, they have nothing 'on prem', and they are required to use an app which we provide as an Azure remote app. We have nothing 'on prem' either!
We are trying to resolve the double signon experience - is there, or will there be, a solution for our use case?
Thanks,
Jack
