Windows 365 Link connection fails with "Failed to open a Microsoft Entra ID credential prompt"

After a user authenticates on the sign-in page, when the user tries to connect to the Cloud PC, the user might encounter the following message:

Connection Denied.
Failed to open a Microsoft Entra ID credential prompt. This can happen in SSO-enabled Cloud PCs if this is the first time you are connecting to it, or if you first connected 30 days ago. Connect to your Cloud PC on another device and then try again.

Cause

This error commonly occurs when single sign-on (SSO) consent is required.

When a user connects to a Cloud PC that has SSO enabled, the user might be prompted for consent to use the authentication token. This issue can happen under several conditions:

• The Cloud PC is newly provisioned.
• The Cloud PC is reprovisioned.
• The Cloud PC just has SSO enabled.
• It's been 30 days since the last time consent was given.

If any of these conditions are true, the next time the user attempts to sign in, consent is required via an interactive prompt. However, the prompt can't be shown on Windows 365 Link because Windows 365 Link uses a non-interactive SSO connection, resulting in the error message.

Workaround

As a workaround, the user can connect to this Cloud PC from a different device or the Web Client where the prompt can be acknowledged. However, the prompt returns every 30 days.

For configuration details on how to prevent this issue, see Suppress single sign-on consent prompts for Windows 365 Link.