Merge pull request #8608 from Deland-Han/cmpy-branch-ci5082

AB#5082: Windows 365 | troubleshooting article | Connection fails with “Failed to open a Microsoft Entra ID credential prompt

Author: Deland-Han

support/windows-365/connection-fails-with-failed-to-open-a-microsoft-entra-id-credential-prompt.md

@@ -0,0 +1,34 @@
+---
+title: Connection Fails with Failed to Open a Microsoft Entra ID Credential Prompt
+description: Introduces how to resolve the connection failure with the Failed to open a Microsoft Entra ID credential prompt error.
+audience: itpro
+manager: dcscontentpm
+ms.date: 04/02/2025
+ms.reviewer: wincicuex, erikje
+ms.topic: troubleshooting
+---
+# Windows 365 Link connection fails with "Failed to open a Microsoft Entra ID credential prompt"
+
+After a user authenticates on the sign-in page, when the user tries to connect to the Cloud PC, the user might encounter the following message:
+
+> Connection Denied.  
+> Failed to open a Microsoft Entra ID credential prompt. This can happen in SSO-enabled Cloud PCs if this is the first time you are connecting to it, or if you first connected 30 days ago. Connect to your Cloud PC on another device and then try again.
+
+## Cause
+
+This error commonly occurs when single sign-on (SSO) consent is required.
+
+When a user connects to a Cloud PC that has SSO enabled, the user might be prompted for consent to use the authentication token. This issue can happen under several conditions:
+
+* The Cloud PC is newly provisioned.
+* The Cloud PC is reprovisioned.
+* The Cloud PC just has SSO enabled.
+* It's been 30 days since the last time consent was given.
+
+If any of these conditions are true, the next time the user attempts to sign in, consent is required via an interactive prompt. However, the prompt can't be shown on Windows 365 Link because Windows 365 Link uses a non-interactive SSO connection, resulting in the error message.
+
+## Workaround
+
+As a workaround, the user can connect to this Cloud PC from a different device or the [Web Client](https://windows365.microsoft.com) where the prompt can be acknowledged. However, the prompt returns every 30 days.
+
+For configuration details on how to prevent this issue, see [Suppress single sign-on consent prompts for Windows 365 Link](/windows-365/link/single-sign-on-suppress).

support/windows-365/toc.yml

@@ -5,6 +5,8 @@ items:
   href: ./health-checks.md
 - name: Connection errors
   href: ./connection-errors.md
+- name: Connection fails with "Failed to open a Microsoft Entra ID credential prompt"
+  href: connection-fails-with-failed-to-open-a-microsoft-entra-id-credential-prompt.md
 - name: Connection fails with "an interactive window could not be shown"
   href: ./connection-error-interactive-window-not-shown.md
 - name: Known issues with Windows 365 Business