You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: windows-365/enterprise/identity-authentication.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -45,15 +45,15 @@ A device can also have an identity which is determined by its join type to Azure
45
45
46
46
There are two identity types:
47
47
48
-
-**[Hybrid identity](/azure/active-directory/hybrid/whatis-hybrid-identity.md)**: Users or devices that are created in on-premises Windows Server Active Directory, then synchronized to Azure AD.
48
+
-**[Hybrid identity](/azure/active-directory/hybrid/whatis-hybrid-identity)**: Users or devices that are created in on-premises Windows Server Active Directory, then synchronized to Azure AD.
49
49
-**Cloud-only identity**: Users or devices that are created and only exist in Azure AD.
50
50
51
51
## Device join types
52
52
53
53
There are two join types that you can select from when [provisioning a Cloud PC](provisioning.md):
54
54
55
-
-**[Hybrid Azure AD Join](/azure/active-directory/devices/concept-azure-ad-join-hybrid.md)**: If you choose this join type, Windows 365 will join your Cloud PC to the Windows Server Active Directory domain you provide. Then, if your organization is properly [configured for Hybrid Azure AD Join](/azure/active-directory/devices/howto-hybrid-azure-ad-join.md), the device will be synchronized to Azure AD.
56
-
-**[Azure AD Join](/azure/active-directory/devices/concept-azure-ad-join.md)**: If you choose this join type, Windows 365 will join your Cloud PC directly to Azure AD.
55
+
-**[Hybrid Azure AD Join](/azure/active-directory/devices/concept-azure-ad-join-hybrid)**: If you choose this join type, Windows 365 will join your Cloud PC to the Windows Server Active Directory domain you provide. Then, if your organization is properly [configured for Hybrid Azure AD Join](/azure/active-directory/devices/howto-hybrid-azure-ad-join), the device will be synchronized to Azure AD.
56
+
-**[Azure AD Join](/azure/active-directory/devices/concept-azure-ad-join)**: If you choose this join type, Windows 365 will join your Cloud PC directly to Azure AD.
57
57
58
58
59
59
Below is a table showing key capabilities or requirements based on the selected join type:
@@ -77,15 +77,15 @@ To successfully access a Cloud PC, a user must authenticate, in turn, with both:
77
77
>Single sign-on (defined as a single authentication prompt that can satisfy both the Windows 365 service authentication and Cloud PC authentication) is not supported at this time.
78
78
79
79
>[!IMPORTANT]
80
-
>In order for authentication to work properly, the user's local machine must also be able to access the URLs in the [Remote Desktop clients](/azure/virtual-desktop/safe-url-list.md#remote-desktop-clients) section of the [Azure Virtual Desktop required URL list](/azure/virtual-desktop/safe-url-list.md).
80
+
>In order for authentication to work properly, the user's local machine must also be able to access the URLs in the [Remote Desktop clients](/azure/virtual-desktop/safe-url-list#remote-desktop-clients) section of the [Azure Virtual Desktop required URL list](/azure/virtual-desktop/safe-url-list).
81
81
82
82
### Windows 365 service authentication
83
83
84
84
Users must authenticate with the Windows 365 service when:
85
85
86
86
- They access [windows365.microsoft.com](https://windows365.microsoft.com).
87
87
- They navigate to the URL that maps directly to their Cloud PC.
88
-
- They use a [Remote Desktop client](/windows-server/remote/remote-desktop-services/clients/remote-desktop-clients.md) to list their Cloud PCs.
88
+
- They use a [Remote Desktop client](/windows-server/remote/remote-desktop-services/clients/remote-desktop-clients to list their Cloud PCs.
89
89
90
90
This authentication triggers an Azure Active Directory prompt, allowing any credential type that is supported by both Azure Active Directory and your OS.
91
91
@@ -94,7 +94,7 @@ This authentication triggers an Azure Active Directory prompt, allowing any cred
94
94
Users must authenticate with the Windows 365 service when:
95
95
96
96
- They navigate to the URL that maps directly to their Cloud PC.
97
-
- They use a [Remote Desktop client](/windows-server/remote/remote-desktop-services/clients/remote-desktop-clients.md) to connect to their Cloud PC.
97
+
- They use a [Remote Desktop client](/windows-server/remote/remote-desktop-services/clients/remote-desktop-clients) to connect to their Cloud PC.
98
98
99
99
>[!NOTE]
100
100
>If a user launches the web browser URL that maps directly to their Cloud PC, they will encounter the Windows 365 service authentication first, then encounter the Cloud PC authentication.
@@ -103,8 +103,8 @@ The following credential types are supported for Cloud PC authentication:
103
103
- Windows desktop client
104
104
- Username and password
105
105
- Smartcard
106
-
-[Windows Hello for Business certificate trust](/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust.md)
107
-
-[Windows Hello for Business key trust with certificates](/windows/security/identity-protection/hello-for-business/hello-deployment-rdp-certs.md)
106
+
-[Windows Hello for Business certificate trust](/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust)
107
+
-[Windows Hello for Business key trust with certificates](/windows/security/identity-protection/hello-for-business/hello-deployment-rdp-certs)
0 commit comments