How to require MFA for ScreenMeet users?

Mike D 0

I have a couple of support engineers that connect to one of my AVD's via Screenmeet. How do I enforce MFA? What I've done so far:

Created a conditional access policy and set it to include ScreenMeet and require MFA for the users in an assigned security group.

The support engineers are assigned to the security group but are never prompted for MFA. Thoughts and suggestions welcome!

VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-25T21:53:39.4366667+00:00
Hello Mike D,

Conditional Access will only enforce MFA if ScreenMeet is actually authenticating through Microsoft Entra ID. In most ScreenMeet setups, users authenticate using ScreenMeet’s own sign-in or a pre‑authenticated support session, so no Entra ID interactive sign‑in occurs. When that happens, Conditional Access is never evaluated, which is why MFA isn’t prompted.

You can quickly confirm this by checking Entra ID → Sign-in logs and filtering for the ScreenMeet application. If you don’t see interactive sign-ins, CA won’t apply.

To enforce MFA, you have a few options:

Configure Entra ID SSO (SAML/OIDC) in ScreenMeet and require MFA via Conditional Access.

If the main concern is protecting the AVD itself, enforce MFA on Azure Virtual Desktop / Windows sign-in instead.

Alternatively, enable MFA directly within ScreenMeet, if supported by the vendor.

So the policy itself looks fine — the key factor is whether ScreenMeet is using Entra ID for authentication.

Hope this helps clarify things.

Your answer