“VPN/tunnel/gateway – Azure Bastion” entry - add auto-fill credentials fields

“VPN/tunnel/gateway – Azure Bastion” entry - add auto-fill credentials fields

1 vote

avatar

A “VPN/tunnel/gateway – Azure Bastion” entry has no associated credentials fields that can be auto-filled. Authentication relies on, e.g. manual login (“Prompt for credentials”) or the authentication token (“Use my current PowerShell login”) from having previously logged into Azure in a PowerShell 7 session (Connect-AzAccount).

It would be beneficial to be able to configure auto-filled credentials in much the same way as other session entries such as Website or Microsoft RDP.

All Comments (2)

avatar

Hello

I understand what you are asking but I'm not sure it's possible to do things any better. I say I'm not sure because there are a lot of different ways to authenticate with Azure. However, when I look at the documentation for Microsoft's Azure.Identity (which is the SDK we use to authenticate users for Azure) all the options for authenticating users depend on OAuth flows, which necessitates using the browser as I understand it. That's understandable when we see that the login needs to support MFA, SSO, etc. Furthermore, while we can hint to the OAuth login which username we want to use (so, if you have multiple users, the proper one will be pre-selected), we don't have a way to inject the password.

We have the option of showing an "app integrated" modal login dialog instead of launching the system browser; but it's not really helpful - from our side, we can't interact with that window at all (it's an embedded WebView launched by the Azure SDK).

About the best suggestion I have - and I haven't tried this on my side - would be to configure the Devolutions Workspace browser extension and if it's setup properly (and you have the associated credential in RDM), I believe you should be able to use it to autofill the username, password and possibly OTP. I'd encourage you to try it out.

If any you or anyone else in the community has a concrete suggestion for how it might be possible to automate the Azure login programatically (remembering that we authenticating users, not services or another Azure-hosted app) I would be happy to investigate further.

Please, let me know if you have some questions or something isn't clear

Kind regards,

Richard Markievicz

avatar

Hi Richard, Thanks for your detailed response and for your suggestion of using the Workspace browser extension. Kind regards, Jim.