How do I setup Entra ID authentication for my Azure Bastion VM?

Hello azureuser01

To login with Microsoft Entra ID user via Bastion they need to use the Bastion native rdp client and Azure CLI.

Please refer this document for more information.Configure Bastion for native client connections - Azure Bastion | Microsoft LearnWe request you to please validate the below details:

To Enable Microsoft Entra ID Authentication for Bastion RDP Access:

Here’s what you need to check and configure:

1.Use Azure Bastion Standard SKU only the Standard SKU supports Entra ID authentication.

You can upgrade from Basic to Standard if needed.

2.The VM must be Microsoft Entra joined, or hybrid joined.

Run this PowerShell command on the VM:

PowerShelldsregcmd /statusShow more lines

Look for AzureAdJoined : YES.

3.Assign either of the following roles to the user.Virtual Machine Administrator Login

Virtual Machine User Login.Use the Azure portal or CLI to assign these roles at the VM or resource group level.

4.Enable Entra ID Login on the VM Use the Azure portal:

Go to the VM → Configuration → Enable Login with Entra ID.

I hope this helps! If these answers your query, do click the "Upvote" of which might be beneficial to other community members reading this thread.

If the above is unclear or you are unsure about something, please add a comment below.