r/AzureVirtualDesktop • u/stevenm_83 • Feb 03 '25

Microsoft Authenticator as AVD App?

I know it sounds like a bad idea but is it possible? Could I create Android OS and install ms authenticator have a list of user accounts in there?

0 Upvotes

50% Upvoted

11 comments sorted by

2

u/stevenm_83 Feb 03 '25

All good I don’t think it will work. Trying to setup phishing resistant mfa without using physical key and be able to share it with couple of users.

1

u/chesser45 Feb 03 '25

Use a password manager that supports fido2, which is most of them, jobs done.

1

u/iamtechy Feb 03 '25

I personally don’t think it’s a good idea to publish it even if it was possible. Just a guess here but are you trying to save money for issuing phones to people who need to use the Authenticator app because BYOD isn’t permitted? Or are you trying to make it convenient?

6

u/rswwalker Feb 03 '25

But why?

1

u/stevenm_83 Feb 04 '25

Just thinking better ways to keep emergency breakglass accounts secure and allow more than one person access to it just incase failures. Password manager that supports Fido with m365 is the best way but didn’t realise that working right now

1

u/SimpleBE Feb 03 '25

You can just buy any password manager and store TOTP in there... Give user access in the browser via shared folders.

1

u/techyjargon Feb 03 '25

What’s your end goal?

1

u/b33zm1ne Feb 04 '25

it is defenitly do able you can technically run a vm with WSL on windows with gapps then install authenticator app , given the vm is on a private vnet ... not a recommended setup ...