Azure Bastion host using Azure Active Directory credentials..

Question

Are we able to access VM via Azure Bastion host using Azure Active Directory credentials??

I have followed instructions to set bastion up and still getting the bellow error. I am able to sign in using the admin credentials but not the Azure AD credentials.

Please any help will be appreciated..

Answer 1

Hi @Cesar Martinez ,

I found this today: https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

Maybe this information helps.

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Please Microsoft Team add the feature to connect to Azure Bastion using Azure Ad in the browser, seems like an odd oversight in the paid service.

Since you can configure the VMs to use Entra Id, but it becomes pointless if you decide to connect using Azure Bastion without a native client.

Answer 3

Hi @Cesar Martinez ,

you need to login to a VM with an user account the VM is able to resolve. This could be:

• A local user account in the guest os of the VM
• An AD domain user account if the VM is AD joined
• An Azure AD account if the option Login with Azure AD is activated for the Azure VM (+ the user is added to the required RBAC role and the OS is Windows Server 2019 Datacenter edition and later, or Windows 10 1809)

https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows#azure-portal

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 4

i have the same issue, i can connect using bastion with local user of vm but nog with the AD user using the website connect all is setup correctly afaics so is there anything i can double check? reading up on the MS articles it should work win11 vm...

Answer 5

I have a similar issue:

I can connect to the VM using bastion and the local admin account, but I can not connect using the AD credentials. However I can connect to the VM using AD credentials if I RDP directly (after assigning a public IP), but this defeats the purpose of the bastion.

So RDP with AD credentials works, RDP using Bastion with AD credentials does not.