We use Azure Virtual Desktop to let offshore users access systems while keeping the underlying data in the UK. Conditional Access blocks access from outside the AVD environment and requires YubiKey authentication for every sign-in through several policies.
The problem is that around 5–10% of users randomly get stuck in a "Try again" loop inside AVD. Teams and Outlook are usually affected: the apps repeatedly detect the YubiKey, fail authentication immediately, and prompt the user to try again. WebAuthn is enabled on the host pool, but the issue continues even after testing different client devices, YubiKeys, and fresh FSLogix profiles.
Has anyone resolved this kind of intermittent YubiKey authentication loop? I would prefer not to disable MFA inside AVD for a small number of affected users.
1 Answer
I ran into a very similar problem, including some painful late-night troubleshooting. The fix was enabling Microsoft Entra authentication for RDP in the AVD single sign-on configuration. After turning that on, the YubiKey prompts stopped looping and authentication became reliable.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures