Using azure Virtual desktop how to implement FSLogix , using Microsoft Entra ID as the identity provider for an hybrid organization.

Addy 20 Reputation points
2024-10-02T08:01:59.3533333+00:00

Azure virtual desktop environment is already deployed. We need to figure out how to implement FSLogix, using Microsoft Entra ID as the identity provider, by which users should be able to log into any individual host without losing their data.

. Step-by-step guidance would be appreciated.

Thanks

Azure Virtual Desktop
Azure Virtual Desktop
A Microsoft desktop and app virtualization service that runs on Azure. Previously known as Windows Virtual Desktop.
1,565 questions
FSLogix
FSLogix
A set of solutions that enhance, enable, and simplify non-persistent Windows computing environments and may also be used to create more portable computing sessions when using physical devices.
495 questions
0 comments No comments
{count} votes

Accepted answer
  1. Nikhil Duserla 2,665 Reputation points Microsoft Vendor
    2024-10-03T07:45:46.91+00:00

    Hi @Addy,

    Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

    Implementing FSLogix in an Azure Virtual Desktop environment with Microsoft Entra ID as the identity provider involves several steps.

    Create a profile container with Azure Files and Microsoft Entra ID: https://learn.microsoft.com/en-us/azure/virtual-desktop/create-profile-container-azure-ad

    This feature doesn't currently support user accounts that you create and manage solely in Microsoft Entra ID. User accounts must be hybrid user identities, which means you'll also need AD DS and either Microsoft Entra Connect or Microsoft Entra Connect cloud sync. You must create these accounts in Active Directory and sync them to Microsoft Entra ID. To assign Azure Role-Based Access Control (RBAC) permissions for the Azure file share to a user group, you must create the group in Active Directory and sync it to Microsoft Entra ID.

    This feature doesn't currently support cross-tenant access for B2B users or guest users. Users from an Entra tenant other than the one configured won't be able to access the file share.

    Using this feature requires Microsoft Entra ID P1 licenses. To find the right license for your requirements, see Compare generally available features of Microsoft Entra ID.

    • Ensure that the on-premises Active Directory users are synced to Microsoft Entra ID using Microsoft Entra Connect or Microsoft Entra Connect cloud sync.
    • Configure the on-premises Active Directory to trust the Microsoft Entra ID domain.
    • Test FSLogix thoroughly to ensure that it is working as expected in a hybrid organization scenario.

    If you have any further queries, do let us know.

    If the answer is helpful, please click "Accept Answer" and "Upvote it."User's image


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.