This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 99%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
Are we able to access VM via Azure Bastion host using Azure Active Directory credentials??
I have followed instructions to set bastion up and still getting the bellow error. I am able to sign in using the admin credentials but not the Azure AD credentials.
Please any help will be appreciated..
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.
A cloud-based identity and access management service for securing user authentication and resource access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 33%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMZ%3C/text%3E%3C/svg%3E)
Please Microsoft Team add the feature to connect to Azure Bastion using Azure Ad in the browser, seems like an odd oversight in the paid service.
Since you can configure the VMs to use Entra Id, but it becomes pointless if you decide to connect using Azure Bastion without a native client.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 89%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDM%3C/text%3E%3C/svg%3E)
I have a similar issue:
I can connect to the VM using bastion and the local admin account, but I can not connect using the AD credentials. However I can connect to the VM using AD credentials if I RDP directly (after assigning a public IP), but this defeats the purpose of the bastion.
So RDP with AD credentials works, RDP using Bastion with AD credentials does not.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 66%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEE%3C/text%3E%3C/svg%3E)
This is the solution. You have to use RDP (Download it first from the Connect blade) in order to use AD credentials.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 8%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
i have the same issue, i can connect using bastion with local user of vm but nog with the AD user using the website connect all is setup correctly afaics so is there anything i can double check? reading up on the MS articles it should work win11 vm...
Hi @Cesar Martinez ,
I found this today: https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows
Maybe this information helps.
----------
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten
Hi @Cesar Martinez ,
you need to login to a VM with an user account the VM is able to resolve. This could be:
Login with Azure AD is activated for the Azure VM (+ the user is added to the required RBAC role and the OS is Windows Server 2019 Datacenter edition and later, or Windows 10 1809) ----------
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten
Hi @Andreas Baumgarten ,
Login with Azure AD is activated for the Azure VM, user add to the require RBAC and Windows Server 2019 datacenter.
I am able to sign in through the remote desktop app using Ip with my Azure AD Account account. (Notice using RDP not Bastion)
But Bastion only works with the VM local admin account and Do not with my active directory credential it failed.. Login failed.
Thank you
Any help will be appreciated.
Thank you
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 80%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENT%3C/text%3E%3C/svg%3E)
I am facing the same problem. Bastion works with local admin of the VM but not AzureAD user account although AzureAD user account is given 'Virtual Machine login User' role .
Any help?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 35%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFJ%3C/text%3E%3C/svg%3E)
Login to your VM and Add Azure AD User as a Remote Desktop User
Enable Bastion Legacy Sharable Link https://learn.microsoft.com/en-us/azure/bastion/shareable-link