Forum Discussion
tkeatingcd
Jul 01, 2024Copper Contributor
Unable to add Azure Virtual Desktop Client Enterprise App to Conditional Access
We currently use conditional access to allow certain contractors to sign into VMs, and from these VMs, access other MS Apps. Currently we block all applications from outside the VM ip range, but excl...
MatTon670
Jul 10, 2024Copper Contributor
For us fix to this was to add: Windows Cloud Login Entra ID app to the exclude list.
As mentioned in documentation:
"The clients used to access Azure Virtual Desktop use the Microsoft Remote Desktop Entra ID app to authenticate to the session host today. An upcoming change will transition the authentication to the Windows Cloud Login Entra ID app. To ensure a smooth transition, you need to add both Entra ID apps to your CA policies."
Link: https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa?tabs=avd
As mentioned in documentation:
"The clients used to access Azure Virtual Desktop use the Microsoft Remote Desktop Entra ID app to authenticate to the session host today. An upcoming change will transition the authentication to the Windows Cloud Login Entra ID app. To ensure a smooth transition, you need to add both Entra ID apps to your CA policies."
Link: https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa?tabs=avd
- Saif786Sep 02, 2025Copper Contributor
The above mentioned solution seems to be working only with Single sign on setup not windows credential based logins.