Hi, in an AVD-environment (Win11 Multi-Session, Hybrid Joined, Entra ID SSO for Logon) there's the need to start published Apps from a OnPrem RDS-Farm (Server 2025 RD-Web with Broker). I know there are tons of blogs on how to gain sso (setting the TERMSRV Policy, SHA1 Certthumbprint,...) but that's not working when the "client" is a AVD Host. I think that should work with Kerberos? Anything special to configure so the AVD RDP-Client is using Kerberos for SSO? When trying to add the Work-Resource (via the
webaccess.customer.com/RDWeb/feed) there's a Windows-Auth popup saying "Username or Password wrong" for the RDWeb-FQDN. The same on Browser is doing SSO to the RDWeb Page, instantly. Downloading a .rdp file and starting giving also a Windows-Auth popup with the Broker-FQDN saying "The login attempt failed".
I've played around on the IIS settings of the RDWeb Servers with Negotiate and Kerberos, without any changes. I'm not sure if (and where) I have to configure sth special on the Broker Servers? Thank you!