Skip double logins in AVD—enable SSO for Windows 11 with Microsoft Entra in just a few steps. Tired of entering your password twice when using Azure Virtual Desktop? In this step-by-step guide, you'll learn how to enable Single Sign-On (SSO) for AVD using Microsoft Entra ID. This walkthrough covers everything from dynamic groups and Entra Authentication for RDP, to configuring Kerberos Server Objects and Conditional Access Policies—all using Windows 11 session hosts. Whether you're using Hybrid Joined or Entra ID Joined hosts, this video shows how to streamline login experiences across your Azure environment. Perfect for IT pros working with Azure, AVD, and Windows 10 or 11, this tutorial follows Microsoft’s official documentation and includes screen-recorded demos to help you configure SSO with confidence. 00:00 - Start 02:58 - Create a Dynamic Group 06:30 - Enable Microsoft Entra Auth for RDP 08:47 - Hide the Consent Prompt 10:49 - Create A Kerberos Server Object 16:15 - Review Conditional Access Policies 17:47 - Enable Single Sign-On at the Host Pool 18:36 - Verify SSO Links: Free Azure guide! Subscribe to the newsletter Zero to Hero with Azure Virtual Desktop A Beginner’s Guide to the AZ-900 Hybrid Identity with Windows AD and Azure AD Windows 365 Enterprise and Intune Management Create a Dynamic Group Enable Microsoft Entra Auth for RDP Hide the Consent Prompt Create a Kerberos Server Object Review Conditional Access Policies Enable Single Sign-On at the Host Pool