Understanding Microsoft Azure AD SSO with non-persistent VDI (Instant Clones)
Channel: SW The Tech Journal
Date: 2022-03-04

See the blog post: https://www.stephenwagner.com/2022/03/06/microsoft-azure-ad-sso-vdi/

Let's talk about Azure AD SSO for Microsoft 365 and Office 365 inside of VDI!

In this video, I explore and discuss Azure AD SSO (and the different SSO methods) for Microsoft 365 and Office 365 inside of non-persistent VDI environments. You can use either Azure AD SSO with Primary Refresh Token, or Seamless SSO depending on your requirements and capabilities of configuration.

If your non-persistent VDI VMs don't need to be Hybrid (Azure) AD joined, you can simply exclude the OU from Azure AD Connect, or configure a registry key on your golden image to block Hybrid AD Domain joins, and then enable Seamless SSO.

If you require Azure Hybrid AD Domain joined machines (SSO with Primary Refresh Token), you must configure your environment as per the Microsoft documents (URLs below) provided.

Registry key to block Azure AD Domain Join:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin: "BlockAADWorkplaceJoin"=dword:00000001

And remember, once you figure out how you plan on deploying SSO, you need to enable it via Azure AD Connect (I recommend reading the Microsoft documentation).

Microsoft Links:
Plan your hybrid Azure Active Directory join implementation - https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan
Configure hybrid Azure AD join - https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-hybrid-azure-ad-join
Azure Active Directory Seamless Single Sign-On - https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso
Device identity and desktop virtualization - https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-device-identity-virtual-desktop-infrastructure


For more content visit my blogs at https://www.stephenwagner.com

To hire me and my company, visit:
-https://www.stephenwagner.com/hire-stephen-wagner-it-services/
-https://www.digitallyaccurate.com/contact-us/

#Azure, #AzureAD, #VDI, #SSO, #AzureSSO, #SeamlessSSO, #VMware, #vExpert