Identify AVD tenant from url

Question

I guess we're not the only company with this problem.

I work with a few partners and I am used to have one id to access each partners' AVD platform. Unfortunnately AVD does not support proper SSO (with B2B).

But when our users access the AVD portal, they are automatically and randomly authenticated with one of those identities, and have to logout and try again.

Has anyone found a way for the AVD portal to identify the tenant from the URL? I'm not talking just about proxying a custom URL, but something like to pass tenant id as a parameter or part of the the path.

Tks

Answer 1

Hi Alexandre Ribeiro do Nascimento,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

I understand your concern as the random authentication causes issues, as users may not be authenticated with the correct partner's identity. To resolve this, users need to log out and try again, hoping to be authenticated with the correct identity.

The Azure Virtual Desktop (AVD) portal does not currently support identifying the tenant from the URL.
Microsoft Entra application proxy provides secure remote access to on-premises web applications. After a single sign-on to Microsoft Entra ID, users can access both cloud and on-premises applications through an external URL or an internal application portal. Even with this workaround, you still can't identify the tenant from the URL. Users would still need to sign in through the Azure portal using their Azure AD credentials.
If you want to learn more about accessing AVD resources: https://learn.microsoft.com/en-us/azure/virtual-desktop/users/connect-web#access-your-resources

If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it."