Skip to content

Commit 866ff25

Browse files
authored
Add troubleshooting for external identities login issues
Added troubleshooting information for external identities unable to discover resources or log in to their Cloud PC due to cross-tenant access restrictions.
1 parent 6566415 commit 866ff25

1 file changed

Lines changed: 13 additions & 0 deletions

File tree

support/azure/virtual-desktop/includes/include-troubleshoot-azure-ad-joined-connections-all.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,3 +35,16 @@ AADNonInteractiveUserSignInLogs
3535
| project ['Time']=(TimeGenerated), UserPrincipalName, AuthenticationRequirement, ['MFA Result']=ResultDescription, Status, ConditionalAccessPolicies, DeviceDetail, ['Virtual Machine IP']=IPAddress, ['Cloud App']=ResourceDisplayName
3636
| order by ['Time'] desc
3737
```
38+
39+
### External Identities are unable to discover resources or login to their Cloud PC
40+
If your Entra ID tenant restricts cross-tenant access and external collaboration settings, you may encounter an error when External Identities attempt to connect.
41+
42+
> Log Name: Microsoft-Windows-AAD, Event ID: 1081, Error Message: OAuth response error: interaction_required, Error description: AADSTS500213: The resource tenant's cross-tenant access policy does not allow this user to access this tenant.
43+
44+
You will need to allow the following applications for external identities to successfully login.
45+
46+
- Azure Virtual Desktop
47+
- Windows Azure Active Directory
48+
- Windows Cloud Login
49+
- Azure Windows VM Sign-In
50+
- Windows 365 (if allocating Windows 365 Cloud PCs)

0 commit comments

Comments
 (0)