Azure Bastion
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.
266 questions
RDP to Azure VM via native Client Bastion with MFA Enabled
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 55.00000000000001%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENP%3C/text%3E%3C/svg%3E)
Niven Peter
86
Reputation points
Hi,
Our objective is to connect to Azure VM using Bastion Host native client via Azure CLI with MFA enabled. The VM we are accessing is hybrid joined. We are able to get pass bastion host with MFA sucessfully prompted but facing error thereafter. Anyone face the similar issue:-
- Launch cmd and type Az login and sign in. Able to sign in successfully
- RDP shown
-
- MFA prompt appears
- Approve sign in
-
- Prompt to allowremote desktop
- Trying to connect
- Error appears
May I know if anyone have tried RDP using native bastion via cli with MFA?
Regards,
Niven Peter
{count} votes
-
KapilAnanth-MSFT 47,491 Reputation points Microsoft Employee2023-07-31T08:32:03.2833333+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you would like to RDP using Native Bastion via Azure CLI with MFA enabled.
- Is RDP working just with Azure CLI Native login and without MFA?
- If not yet tested, can you please use a testUser and testVM to check if RDP works without MFA enabled?
Cheers,
Kapil
-
Niven Peter 86 Reputation points
2023-08-01T02:55:06.58+00:00 Yes RDP with Azure CLI without MFA is working fine. Please see the below:-
- Launch CMD and login to Azure
- Remote desktop connection is prompted
- Username and password is inserted
- Connection in progress
- Connection is able to be established
-
KapilAnanth-MSFT 47,491 Reputation points Microsoft Employee
2023-08-01T04:41:16.2866667+00:00 To troubleshoot this issue, I think we will need a specialized 1:1 session, where a support engineer can have a screen share session to pinpoint the issue.
If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.
In case you need a one-time free technical support could you please send an email to AzCommunity[At]Microsoft[Dot]Com with the below details.
- Subject : Attn Kaananth Thread URL: Link to this thread.
- Subscription ID : Subscription ID where Bastion is created
Cheers,
Kapil
-
Aaron Mathias 0 Reputation points2023-11-30T10:53:06.7+00:00 I have a similar requirement as well for a few clients that I support.
I'd be very interested in hearing about this solution.
-
KapilAnanth-MSFT 47,491 Reputation points Microsoft Employee
2023-12-01T11:56:57.17+00:00 If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.
Cheers,
Kapil
Sign in to comment
Sign in to answer