Azure Virtual Desktop access to external user ?

Question

Hello I have deployed AVD shared host pool with azure ADDS which has a domain say abc.com.
Can I give access to machine in a host pool so that they can access applications/desktop and is not part of the domain say user1@xyz .com?

Answer 1

Hi @Punditji

Before external users can connect to your deployment, you need to enroll your subscription in per-user access pricing. Per-user access pricing lets users outside of your organization access apps and desktops in your subscription. Your enrolled subscription will be charged each month based on the number of distinct users that connect to Azure Virtual Desktop resources.
https://learn.microsoft.com/en-us/azure/virtual-desktop/remote-app-streaming/per-user-access-pricing

For streaming RemoteApps and desktops to external users. For example, a software vendor called Contoso might use Azure Virtual Desktop to serve remote streams of Contoso’s productivity app to Contoso’s customers (users who aren't Contoso employees). In this case, Contoso must enroll in Azure Virtual Desktop’s per-user access pricing. This license type lets Contoso pay for Azure Virtual Desktop access rights on behalf of those users through an Azure meter based on the number of users who access Azure Virtual Desktop each month. The users in the deployment don't need a separate license like Microsoft 365 to access Azure Virtual Desktop.
https://learn.microsoft.com/en-us/azure/virtual-desktop/remote-app-streaming/licensing#licensing-azure-virtual-desktop-for-external-users

For more details this question is already explained in Q & A forum.
https://learn.microsoft.com/en-us/answers/questions/496721/is-azure-virtual-desktop-working-with-azuread-exte.html

If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

Answer 2

1. Hello I have deployed AVD shared host pool with azure ADDS which has a domain say abc.com.
   Can I give access to machine in a host pool so that they can access applications/desktop and is not part of the domain say user1@xyz .com?
   -In theory yes, only if you have ADFS and that xyz domain is within the same AD tenant. Would need to test to confirm as I haven't deployed this configuration myself.
   https://learn.microsoft.com/en-us/azure/virtual-desktop/authentication
2. how can we manage external users. Say I have combination of internal.and external users. Do I create that external user in our Azure AD ?How that will play for user profiles using fslogix as these users are not part of my domain in azure ADDS ABC.com?"

-There is no way to provide external users access to AVD at this time.
The users will have to be a part of the ADDS domain to have sign on rights. What could be done is if you used ADDS for internal and created a Azure AD DS domain for "external" users but there would still be Azure AD users with no support for B2B or guest users.