AzureAD based authentication reprompts for credentials for login

AzureAD based authentication reprompts for credentials for login

avatar

Hello,

I have AzureAD enabled host where I need to login with AzureAd\upn based credentials. "AzureAD" host is selected in properties but I'm reprompted for login each time I'm trying to connect. Disabling/enabling NLA has no effect. Not sure what needs to be done to troubleshoot.

All Comments (15)

avatar

Hello,

Thank you for contacting us regarding this,

I have a few questions which you can hopefully answer.

  • Which version of RDM are you using?
  • Which type of data source are you using?


Was this working for you previously? Perhaps you could provide me a screenshot of this prompt?

Let me know,

Best regards,

Samuel Dery

avatar

RDM version is 2022.1.21.0 64-bit
Datasource is Devolutions Online drive

This never worked (I never used AzureAD based authentication before). Prompt is normal prompt for password (see attached)

forum image

avatar

Hello,

Thank you for your reply,

I'm wondering if you're able to connect without issue outside RDM?

Could you also provide me a screenshot of your entry "Properties"? I'd like to see the configuration.

Let me know,

Best regards,

Samuel Dery

avatar

Yes, I can connect via mstsc.exe with no reprompts


forum image



avatar

Hello,

Thank you for your reply,

I'm wondering if you perform an export of your mstsc configuration and import it in RDM, by going under "File" -> "Import" do you encounter the same issue with this imported entry?

Let me know,

Best regards,

Samuel Dery

avatar

If I imported RDP then it works fine, it just launches external MSTSC.Exe and does not prompt for username/password. It's not prompting for password but it's not launching withing RDM interface.

forum image

forum image

avatar

Hello,

Thank you for your reply,

I see, if you go in your entry "Properties" and change the display from "External" to 'Embedded" is it still working for you?

Let me know,

Best regards,

Samuel Dery

avatar

Yes, login works fine as long as login info comes from Windows but reprompts if it comes from stored credentials in RDM

avatar

Hello,

Thank you for your reply,

That is indeed odd, from my understanding the behavior should be the same, can you confirm the credentials you're using from your "Linked (Vault)" are correct?

Let me know,

Best regards,

Samuel Dery

avatar

I verified several times. I don't type them manually but paste them.

avatar

Hello,

Thank you for your reply,

I see, I'd like you to try the following configuration change your entry "Credentials" from "Linked (Vault)" to "Custom" and enter your credentials in their respective fields, "Username", "Domain" and "Password".

Once done go under the "Advanced" section in your entry "Properties" and change the "Username format" field to "Domain\User", if you attempt the connection with this configuration does it still fail?

If so, I'd like you to test with a portable instance of RDM to see if you encounter the same issue, To do so, you will need to do the following:
1- Download the .zip file below:
https://devolutions.net/remote-desktop-manager/home/thankyou/rdmfreebin
2- Create a new folder on your Desktop
3- Extract the content of the .zip file into the folder created at #2
4- Go in this folder once the .zip file has been extracted and run remotedesktopmanagerfree.exe
5- Enter your current serial which you can find here: https://portal.devolutions.com/serials

Let me know,

Best regards,

Samuel Dery

avatar

Found that issue with re-prompt was caused by checkbox "Azure AD" host, it seems to be appending AzureAd to username/password.
If I have just username credentials and have "Azure AD" host checked then I get repromoted
If I have AzureAD\username and have "Azure AD" uncheck then no reprompt happens
There is some issue seems with "Azure AD" checkbox in properties and how it affects username

forum image

avatar

Hello,

Thank you for your reply,

I see, I'm glad to hear that it is now working for you,

If you remove the "AzureAD\" from your "Username" and have the "Azure AD Host" checked do you get reprompted?

Let me know,

Best regards,

Samuel Dery

avatar

Yes, adding AzureAD checkbox and removing it from credentialis does not work

forum image

avatar

Hello,

Thank you for your patience,

I've contacted our engineering department regarding your case,

The option "Azure AD Host" will add ".\AzureAD\" to the "Username" which is probably why it is not working for you.

Since it's working for you with the "Azure AD Host" option unchecked, I would recommend using this method.

Let me know if you have further questions,

Best regards,

Samuel Dery