|
1 | 1 | ---
|
2 |
| -title: Login in to Linux virtual machine in Azure using Azure Active Directory and openSSH certificate-based authentication |
| 2 | +title: Login to Linux virtual machine in Azure using Azure Active Directory and openSSH certificate-based authentication |
3 | 3 | description: Login with Azure AD using openSSH certificate-based authentication to an Azure VM running Linux
|
4 | 4 |
|
5 | 5 | services: active-directory
|
@@ -108,9 +108,9 @@ Ensure your client meets the following requirements:
|
108 | 108 | > [!IMPORTANT]
|
109 | 109 | > SSH clients based on PuTTy do not support openSSH certificates and cannot be used to login with Azure AD openSSH certificate-based authentication.
|
110 | 110 |
|
111 |
| -## Enabling Azure AD login in for Linux VM in Azure |
| 111 | +## Enabling Azure AD login for Linux VM in Azure |
112 | 112 |
|
113 |
| -To use Azure AD login for Linux VM in Azure, you need to first enable Azure AD login option for your Linux VM, configure Azure role assignments for users who are authorized to login in to the VM and then use SSH client that supports OpensSSH such as Azure CLI or Azure Cloud Shell to SSH to your Linux VM. There are multiple ways you can enable Azure AD login for your Linux VM, as an example you can use: |
| 113 | +To use Azure AD login for Linux VM in Azure, you need to first enable Azure AD login option for your Linux VM, configure Azure role assignments for users who are authorized to login to the VM and then use SSH client that supports OpensSSH such as Azure CLI or Azure Cloud Shell to SSH to your Linux VM. There are multiple ways you can enable Azure AD login for your Linux VM, as an example you can use: |
114 | 114 |
|
115 | 115 | - Azure portal experience when creating a Linux VM
|
116 | 116 | - Azure Cloud Shell experience when creating a Windows VM or for an existing Linux VM
|
@@ -238,7 +238,7 @@ az extension show --name ssh
|
238 | 238 |
|
239 | 239 | ## Using Conditional Access
|
240 | 240 |
|
241 |
| -You can enforce Conditional Access policies such as require multi-factor authentication, require compliant or hybrid Azure AD joined device for the device running SSH client, and checking for risk before authorizing access to Linux VMs in Azure that are enabled with Azure AD login in. The application that appears in Conditional Access policy is called "Azure Linux VM Sign-In". |
| 241 | +You can enforce Conditional Access policies such as require multi-factor authentication, require compliant or hybrid Azure AD joined device for the device running SSH client, and checking for risk before authorizing access to Linux VMs in Azure that are enabled with Azure AD login. The application that appears in Conditional Access policy is called "Azure Linux VM Sign-In". |
242 | 242 |
|
243 | 243 | > [!NOTE]
|
244 | 244 | > Conditional Access policy enforcement requiring device compliance or Hybrid Azure AD join on the client device running SSH client only works with Azure CLI running on Windows and macOS. It is not supported when using Azure CLI on Linux or Azure Cloud Shell.
|
|
0 commit comments