Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
In this article, you learn how to enable single sign-on (SSO) for dev boxes in Microsoft Dev Box pools.
By using SSO, you can skip the credential prompt when you connect to a dev box and automatically sign in to Windows through Microsoft Entra authentication. Microsoft Entra authentication also provides passwordless authentication and support for third-party identity providers. To get started, review the steps to configure SSO.
Prerequisites
To enable SSO for dev boxes, you must configure SSO for your organization. For more information, see Configure single sign-on for Azure Virtual Desktop by using Microsoft Entra ID authentication.
Enable SSO for dev boxes
SSO is enabled at the pool level. Dev Box supports SSO for dev box pools that use Microsoft Entra joined networks, and Microsoft hosted networks, but not pools that use Microsoft Entra hybrid-joined networks.
When you enable SSO for a pool, all new dev boxes created from that pool use SSO. Existing dev boxes continue to use the existing sign-on method. You can enable SSO for dev boxes when you create a new pool. You can also enable SSO for an existing pool.
Enable SSO when you create a new pool
To enable SSO for dev boxes when you create a pool, follow these steps:
Sign in to the Azure portal.
In the search box, enter projects.
In the list of results, select Projects.
Select the project for which you want to create the pool.
On the left menu, under Manage, select Dev box pools.
On the toolbar, select Create.
On the Create pool page, under Management, select Enable single sign-on.
Enter the remaining details for your new pool, and select Create.
Enable SSO for an existing pool
To enable SSO for dev boxes in an existing pool, follow these steps:
Sign in to the Azure portal.
In the search box, enter projects.
In the list of results, select Projects.
Select the project that contains the pool for which you want to enable SSO.
On the left menu, under Manage, select Dev box pools.
Select the pool for which you want to enable SSO.
On the line for the pool, select the ellipsis (...) and then select Edit.
On the Edit pool page, under Management, select Enable single sign-on and then select Save.
Disable SSO for dev boxes
You can disable SSO for a pool at any time by clearing the Enable single sign-on option on the Edit pool page.
To disable SSO for dev boxes in an existing pool, follow these steps:
Sign in to the Azure portal.
In the search box, enter projects.
In the list of results, select Projects.
Select the project that contains the pool for which you want to disable SSO.
On the left menu, under Manage, select Dev box pools.
Select the pool for which you want to disable SSO.
On the line for the pool, select the ellipsis (...) and then select Edit.
On the Edit pool page, under Management, clear Enable single sign-on and select Save.
If you disable SSO for a pool, new dev boxes created from that pool prompt the user for credentials. Existing dev boxes continue to use SSO.
Understand the SSO user experience
When SSO is enabled for a pool, your sign-on experience is:
- The first time you connect to a dev box with SSO enabled, you sign in to your physical machine. Then you connect to your dev box from the developer portal. When the dev box starts up, you must enter your credentials to access the dev box.
- The next time you connect to your dev box, you don't have to enter your credentials.
If your connection to your dev box is interrupted because your client machine goes to sleep, a message appears that explains the issue. To reconnect, select Reconnect. You don't have to reenter your credentials.