Entra join
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 1d59922 · +20 −19 lines · also on GitHub
⋯ 13 unchanged lines
1414
1515
| Microsoft Entra join | Description |
1616
| --- | --- |
17
−| **Definition** | Joined only to Microsoft Entra ID requiring organizational account to sign in to the device |
18
−| **Primary audience** | Suitable for both cloud-only and hybrid organizations. |
19
−| | Applicable to all users in an organization |
20
−| **Device ownership** | Organization |
21
−| **Operating Systems** | All Windows 11 and Windows 10 devices except Home editions |
22
−| | [Windows Enterprise multi-session Virtual Machines running in Azure](/azure/virtual-desktop/windows-multisession-faq#can-windows-enterprise-multi-session-be-microsoft-entra-joined) and [Windows Server 2019 and newer Virtual Machines running in Azure](howto-vm-sign-in-azure-ad-windows.md) (Server core isn't supported) |
23
−| | (Public preview) Apple devices running macOS 13 or newer |
24
−| **Provisioning** | Self-service: Windows Out of Box Experience (OOBE) or Settings |
25
−| | Bulk enrollment |
26
−| | Windows Autopilot |
27
−| | (Public preview) Apple Automated Device Enrollment (applies to Apple devices only) |
28
−| **Device sign in options** | Organizational accounts using: |
29
−| | Password |
30
−| | [Passwordless](../authentication/concept-authentication-passkeys-fido2.md) options like [Windows Hello for Business](/windows/security/identity-protection/hello-for-business/hello-planning-guide), [Platform Credential for macOS (Public preview)](macos-psso.md) and FIDO2.0 security keys. |
31
−| **Device management** | Mobile Device Management (example: Microsoft Intune) |
32
−| | [Configuration Manager standalone or co-management with Microsoft Intune](/mem/configmgr/comanage/overview) |
33
−| **Key capabilities** | single sign-on (SSO) to both cloud and on-premises resources |
34
−| | Conditional Access through mobile device management (MDM) enrollment and compliance evaluation |
35
−| | [Self-service Password Reset and Windows Hello PIN reset on lock screen](../authentication/howto-sspr-windows.md) |
17
+| **Definition** | <ul><li>Joined only to Microsoft Entra ID requiring organizational account to sign in to the device</li></ul> |
18
+| **Primary audience** | <ul><li>Suitable for both cloud-only and hybrid organizations. </li><li>Applicable to all users in an organization</li></ul> |
19
+| **Device ownership** | <ul><li>Organization</li></ul> |
20
+| **Operating Systems** | <ul><li>All Windows 11 and Windows 10 devices except Home editions</li><li>[Windows Enterprise multi-session Virtual Machines running in Azure](/azure/virtual-desktop/windows-multisession-faq#can-windows-enterprise-multi-session-be-microsoft-entra-joined)</li><li>[Windows Server 2019 and newer Virtual Machines running in Azure](howto-vm-sign-in-azure-ad-windows.md) (Server core isn't supported)</li><li>Apple devices running macOS 13 or newer</li><li>Linux editions:<ul><li>Ubuntu 22.04/24.04 LTS</li><li>Red Hat Enterprise Linux 8/9 LTS</li></ul></li></ul> |
21
+| **Provisioning** | <ul><li>Self-service: Windows Out of Box Experience (OOBE) or Settings</li><li>Bulk enrollment</li><li>Windows Autopilot</li><li>(Public preview) Apple Automated Device Enrollment (applies to Apple devices only)</li></ul> |
22
+| **Device management** | <ul><li>Mobile Device Management (example: Microsoft Intune)</li><li>[Configuration Manager standalone or co-management with Microsoft Intune](/mem/configmgr/comanage/overview)</li></ul> |
23
+| **Key capabilities** | <ul><li>single sign-on (SSO) to both cloud and on-premises resources</li><li>Conditional Access</li><li>[Self-service Password Reset and Windows Hello PIN reset on lock screen](../authentication/howto-sspr-windows.md)</li></ul> |
24
+ |
25
+
26
+## **Device sign in options**
27
+
28
+The following are the supported sign-in options for Microsoft Entra joined devices. The availability of these options depends on the device's operating system and configuration. For example, Windows Hello for Business requires additional setup and may not be available on all devices.
29
+
30
+| Platform | Password | SmartCard | Microsoft Authenticator phone sign-in | [Windows Hello for Business](/windows/security/identity-protection/hello-for-business/hello-planning-guide) / [Platform Credentials](macos-psso.md) | Web Sign-In | FIDO2 |
31
+| --------------------- | --- | --- | --- | --- | ---| --- |
32
+|Windows 10/11 | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
33
+|macOS 13+ | ✅ | ✅ | | | | |
34
+|Ubuntu 22.04/24.04 LTS | ✅ | ✅ | ✅ | | | |
35
+|RHEL 8/9/10 | ✅ | ⚠️ | ✅ | | | |
36
+
3637
3738
You sign in to Microsoft Entra joined devices using a Microsoft Entra account. Access to resources can be controlled based on your account and [Conditional Access policies](../conditional-access/policy-alt-all-users-compliant-hybrid-or-mfa.md) applied to the device.
3839
⋯ 49 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:02 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.