Azure Virtual Desktop AVD External User Access Limitations

Question

Azure Virtual Desktop AVD External User Access Limitations

Irosh Prasad 30

We require Azure Virtual Desktop access for external users using B2B guest accounts (“#EXT#” identities). Microsoft documentation states that AVD does not support external identities, and community feedback confirms this limitation. Is there any supported workaround for when B2B guest access will be available for AVD?

Irosh Prasad 30 Reputation points

2025-06-16T11:51:24.84+00:00

Any external tools to do workaround on this?
Alex Burlachenko 9,780 Reputation points

2025-06-16T14:03:27.3333333+00:00
Irosh Prasad hi and thanks for dropping this question,

you could create regular Azure AD accounts for your external folks instead of guest accounts. Yeah, it's more work, but Microsoft mentions this as an option in their AVD user access docs. Not ideal, but it'll get you moving.

Another angle, have you tried Azure AD Application Proxy? https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy might be worth testing as a temporary solution.

But why not set up a separate host pool just for external users? Keeps things tidy and secure. Bonus this trick works with other VDI solutions too, so handy to know ))

And definitely double-check you're running the latest AVD version the update notes sometimes sneak in new features without much fanfare.

If you're really in a bind, third-party identity brokers (looking at you, Okta and Ping) might help bridge the gap. Not perfect, business doesn't stop for tech limitations, right? %)

Keep tabs on the Microsoft 365 roadmap too, they're constantly adding new identity features, so proper B2B support might pop up sooner than we think

Let me know if its still not working.

Best regards,

Alex

and "yes" if you would follow me at Q&A - personaly thx. P.S. If my answer help to you, please Accept my answer PPS That is my Answer and not a Comment
Irosh Prasad 30 Reputation points

2025-06-16T14:29:10.17+00:00

my client needs an option for external users to register using "Entra Id" and access apps via remote desktop web client.
Alex Burlachenko 9,780 Reputation points

2025-06-16T16:07:47.87+00:00

Okay 👍 I'll check it and let u to know. Rgds, Alex
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-17T14:54:01.15+00:00

Hi Irosh Prasad,

can you please follow this document once:
https://learn.microsoft.com/en-us/entra/fundamentals/how-to-create-delete-users#create-a-new-user
Irosh Prasad 30 Reputation points

2025-06-17T14:59:32.3433333+00:00

What i need an option for external users to register using "Entra Id" and access apps via remote desktop web client.
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-19T12:20:41.52+00:00

Hi Irosh Prasad

Since the password for these guest users are not stored within the same tenant hence, they won't be able to sign in in this case and this is by design

For any user who was created locally within your Azure AD instance the password will be stored either on Azure AD or synced from On-premises if they are synced users

If you have any queries, please do let us know, we will help you
Irosh Prasad 0 Reputation points

2025-06-19T12:25:06.3733333+00:00

Aslam Mohammad
So, there is no possible way to enable external users (i.e. gmail domain) to be able to access AVD without making them B2B guests?
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-20T15:47:31.74+00:00

Hi Irosh Prasad

Since it is not possible with the guest accounts try to invite the guest user as a member

If you have any queries, please do let us know, we will help you
Irosh Prasad 30 Reputation points

2025-06-20T15:53:32.9+00:00

So this is not possible with Entra Id or Entra External Id tenant?
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-20T16:25:56.2433333+00:00

Hi Irosh Prasad

it is not possible with Entra External Id tenant
Irosh Prasad 30 Reputation points

2025-06-20T16:38:23.5166667+00:00

thanks

Accepted answer

0 additional answers

Your answer

Irosh Prasad 30 Reputation points

2025-06-16T11:51:24.84+00:00

Any external tools to do workaround on this?
Alex Burlachenko 9,780 Reputation points

2025-06-16T14:03:27.3333333+00:00

Irosh Prasad hi and thanks for dropping this question,

you could create regular Azure AD accounts for your external folks instead of guest accounts. Yeah, it's more work, but Microsoft mentions this as an option in their AVD user access docs. Not ideal, but it'll get you moving.

Another angle, have you tried Azure AD Application Proxy? https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy might be worth testing as a temporary solution.

But why not set up a separate host pool just for external users? Keeps things tidy and secure. Bonus this trick works with other VDI solutions too, so handy to know ))

And definitely double-check you're running the latest AVD version the update notes sometimes sneak in new features without much fanfare.

If you're really in a bind, third-party identity brokers (looking at you, Okta and Ping) might help bridge the gap. Not perfect, business doesn't stop for tech limitations, right? %)

Keep tabs on the Microsoft 365 roadmap too, they're constantly adding new identity features, so proper B2B support might pop up sooner than we think

Let me know if its still not working.

Best regards,

Alex

and "yes" if you would follow me at Q&A - personaly thx. P.S. If my answer help to you, please Accept my answer PPS That is my Answer and not a Comment
Irosh Prasad 30 Reputation points

2025-06-16T14:29:10.17+00:00

my client needs an option for external users to register using "Entra Id" and access apps via remote desktop web client.
Alex Burlachenko 9,780 Reputation points

2025-06-16T16:07:47.87+00:00

Okay 👍 I'll check it and let u to know. Rgds, Alex
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-17T14:54:01.15+00:00

Hi Irosh Prasad,

can you please follow this document once:
https://learn.microsoft.com/en-us/entra/fundamentals/how-to-create-delete-users#create-a-new-user
Irosh Prasad 30 Reputation points

2025-06-17T14:59:32.3433333+00:00

What i need an option for external users to register using "Entra Id" and access apps via remote desktop web client.
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-19T12:20:41.52+00:00

Hi Irosh Prasad

Since the password for these guest users are not stored within the same tenant hence, they won't be able to sign in in this case and this is by design

For any user who was created locally within your Azure AD instance the password will be stored either on Azure AD or synced from On-premises if they are synced users

If you have any queries, please do let us know, we will help you
Irosh Prasad 0 Reputation points

2025-06-19T12:25:06.3733333+00:00

Aslam Mohammad
So, there is no possible way to enable external users (i.e. gmail domain) to be able to access AVD without making them B2B guests?
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-20T15:47:31.74+00:00

Hi Irosh Prasad

Since it is not possible with the guest accounts try to invite the guest user as a member

If you have any queries, please do let us know, we will help you
Irosh Prasad 30 Reputation points

2025-06-20T15:53:32.9+00:00

So this is not possible with Entra Id or Entra External Id tenant?
Aslam Mohammad 400 Reputation points Microsoft External Staff Moderator

2025-06-20T16:25:56.2433333+00:00

Hi Irosh Prasad

it is not possible with Entra External Id tenant
Irosh Prasad 30 Reputation points

2025-06-20T16:38:23.5166667+00:00

thanks

Answer 1

Aslam Mohammad 400 Microsoft External Staff Moderator

Hi Irosh Prasad,

Azure Virtual Desktop (AVD) currently does not support external identities, including B2B guest accounts.
This limitation has been confirmed by Microsoft documentation.

User's image

Please refer this document:
https://learn.microsoft.com/en-us/azure/virtual-desktop/licensing#internal-and-external-commercial-purposes

If you have any further queries, let me know. If the information is helpful, please click on Upvote.

Thank you.

Share via

Azure Virtual Desktop AVD External User Access Limitations

0 additional answers

Your answer