Hello @Naveen Nisad ,
Thank you reaching out Microsoft Q&A.
I understand you want to use external USB device(Yubikey device) inside AVD so MFA can be done.
Azure Virtual Desktop supports in-session passwordless authentication using Windows hello for business or security devices like FIDO keys when using the Windows desktop client. Passwordless authentication is enabled automatically when the session host and local PC are using the following operating systems:
- Windows 11 single or multi-session with the 2022-10 Cumulative Updates for Windows 11 (KB5018418) or later installed.
- Windows 10 single or multi-session, versions 20H2 or later with the 2022-10 Cumulative Updates for Windows 10 (KB5018410) or later installed.
- Windows Server 2022 with the 2022-10 Cumulative Update for Microsoft server operating system (KB5018421) or later installed.
Check with the default host pool property as per the below image:
When enabled, all WebAuthn requests in the session are redirected to the local PC. You can use Windows Hello for Business or locally attached security devices to complete the authentication process. If the redirectwebauthn is not enabled you can enable by following the document: https://learn.microsoft.com/en-us/azure/virtual-desktop/redirection-configure-webauthn?tabs=intune&pivots=azure-virtual-desktop
For additional information follow: https://learn.microsoft.com/en-us/azure/virtual-desktop/authentication#in-session-authentication
Hope this helps. Do let us know if you any further queries.
If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Regards,
Goutam Pratti.