Azure AD Login to Microsoft Azure Linux VM

A look at logging into an Azure Linux VM using an Azure AD account!

🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!

▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
0:00 - Introduction
0:43 - Requirements for the Linux VM
4:52 - RBAC for login
6:34 - Connecting client requirements
9:56 - Connecting with SSH demo
12:35 - How this all works
13:44 - Conditional access policy
14:59 - Short lived SSH certs and continued flow
16:40 - Checks in the Azure VM
18:16 - Checking roles and local objects
21:57 - Looking at the certs
23:55 - Summary and close

▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Linux AAD login documentation:
► Whiteboard for this video:

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
📅 Weekly Azure Update
☁ Azure Master Class
⚙ DevOps Master Class
💻 PowerShell Master Class
🎓 Certification Cram Videos
❔ Question about my setup?
👕 Cure Childhood Cancer Charity T-Shirt Channel Store

#microsoft #azure #johnsavillstechnicaltraining #onboardtoazure #cloud

[NTFAQGuy]

Hey everyone, welcome to this video diving into logging in to Linux VM's in Azure using an Azure AD account! Please make sure to read the description for the chapters and key information about this video and others.

⚠ P L E A S E N O T E ⚠

🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there!
🕰 I don't discuss future content nor take requests for future content so please don't ask 😇

Thanks for watching!
☁🤙💪

[dirk]

I was just working on this issue. Couldn't be uploaded at a better moment. Thanks John, you're the better half of docs.ms :-)

[Markuk]

Thanks John, understanding how this all goes together means I can try and debug why I get intermittent access via SSH to new VMs. Appreciate you putting this together I am a new subscriber and loving the content. Keep up the great work 👍🏻

[henriquealexandreh]

Insightful and concise explanation. Thanks a mil again John!

[MartinHamplchroust]

Cool content... so many steps behind the scenes though 😮 Quite a robust solution

[CloudContext]

This is great! Definitely going to give this one a go.

[blackdeckerzr]

Really useful, we have a few VM`s that data scientist use and i'm not happy with the auth we use, might try to implement this.

[cruxnetworx]

Thank you so much! Time to test this out.

[christianibiri]

Great content, very detailed :) thank you

[eddyln]

Hi John, thank for this video, really helpful. Do you know if there is any plans to make this work with Azure Bastion?

[petersharrocks]

You mentioned the use of conditional access policies are possible with this setup, but would requiring MFA force a TOTP code the same way as other linux PAM modules do? i.e. the google authenticator module? If that's the case, does this then support push notifications with the Microsoft Authenticator app as well?

[bertusviljoen]

Will you be able to change existing Linux VMs? Or should you really start with new VMs?

[daniejam]

Hi John, do you know if this supports guest accounts from another tenant?

[MartinMichalko]

Hey John, do you have any idea how we can send files to/from linux machine by using scp in this approach?