AVD - Sign in failed. Please check your username and password and try again

Question

Hello, I've deployed AVD with one VM. I've tested it on my admin account, my regular account and on my friends account. Nice and smooth. Today, when I did an overview for employees who are going to need this VM I encountered a problem - they couldn't sign in to VM, because "Sign in failed. Please check your username and password and try again."

I've: - added them to RBAC as Virtual Machine User Login at Resource group level - added them to application group - they don't have MFA configured to use AVD - I've turned on "Connections will use Microsoft Entra authentication to provide single sign-on"

And again - I am able to sign in into this VM from two of my accounts, and my colleague from IT also can, but those users can't.

Error from log analytics: https://imgur.com/kqZ46ce

Data from Entra ID: https://imgur.com/BKjaRRp

Soon I will lose my mind over this.

Answer 1

Hi adv_kd,

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue:

AVD - Sign in failed. Please check your username and password and try again.

Solution:

Problem was that those users were in Conditional Access policy that "caused" problem. It requires users to use hybrid joined devices.

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Hello, problem solved...

Problem was that those users were in Conditional Access policy that "caused" problem. It requires users to use hybrid joined devices. What is more interesting - CA showed result as "success" so it shouldn't block users, but it did. I didn't dig in further, maybe today I'll check what exactly is going on with this CA policy.

I though I will lose my mind over "incorrect username or password". :|