Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
In this article, you learn how to enable single sign-on (SSO) for dev boxes in Microsoft Dev Box pools.
By using SSO, you can skip the credential prompt when you connect to a dev box and automatically sign in to Windows through Microsoft Entra authentication. Microsoft Entra authentication also provides passwordless authentication and support for third-party identity providers. To get started, review the steps to configure SSO.
Prerequisites
To enable SSO for dev boxes, you must configure SSO for your organization. For more information, see Configure single sign-on for Azure Virtual Desktop by using Microsoft Entra ID authentication.
Enable SSO for dev boxes
SSO is enabled at the pool level. Dev Box supports SSO for dev box pools that use Microsoft Entra joined networks, and Microsoft hosted networks, but not pools that use Microsoft Entra hybrid-joined networks.
When you enable SSO for a pool, all new dev boxes created from that pool use SSO. Existing dev boxes continue to use the existing sign-on method. You can enable SSO for dev boxes when you create a new pool. You can also enable SSO for an existing pool.
Enable SSO when you create a new pool
To enable SSO for dev boxes when you create a pool, follow these steps:
Sign in to the Azure portal.
In the search box, enter projects.
In the list of results, select Projects.
Select the project for which you want to create the pool.
On the left menu, under Manage, select Dev box pools.
On the toolbar, select Create.
On the Create a dev box pool page, configure the required settings on the Basics tab and the Management tab.
On the Management tab, under Access, select the Enable single sign-on option:
Select Create.
Enable SSO for an existing pool
To enable SSO for dev boxes in an existing pool, follow these steps:
Sign in to the Azure portal.
In the search box, enter projects.
In the list of results, select Projects.
Select the project that contains the pool for which you want to enable SSO.
On the left menu, under Manage, select Dev box pools.
Select the pool for which you want to disable SSO, select More actions (...), and then select Edit:
On the Edit pool page, on the Management tab, select the Enable single sign-on option:
Select Save.
Disable SSO for dev boxes
You can disable SSO for a pool at any time by clearing the Enable single sign-on option on the Edit pool page.
To disable SSO for dev boxes in an existing pool, follow these steps:
Sign in to the Azure portal.
In the search box, enter projects.
In the list of results, select Projects.
Select the project that contains the pool for which you want to disable SSO.
On the left menu, under Manage, select Dev box pools.
Select the pool for which you want to disable SSO, select More actions (...), and then select Edit:
On the Edit pool page, on the Management tab, clear the Enable single sign-on option:
Select Save.
If you disable SSO for a pool, new dev boxes created from that pool prompt the user for credentials. Existing dev boxes continue to use SSO.
Understand the SSO user experience
When SSO is enabled for a pool, here's a summary of your sign-on experience:
The first time you connect to a dev box with SSO enabled, you sign in to your physical machine. Then you connect to your dev box from the developer portal. When the dev box starts up, you must enter your credentials to access the dev box.
The next time you connect to your dev box, you don't have to enter your credentials.
If your connection to your dev box is interrupted because your client machine goes to sleep, a message appears that explains the issue. To reconnect, select Reconnect. You don't have to reenter your credentials.