Skip to content

GUACAMOLE-2210: Add support for AAD authentication to RDP protocol. - #1168

Open
aleitner wants to merge 1 commit into
apache:mainfrom
aleitner:GUACAMOLE-2210-AAD
Open

GUACAMOLE-2210: Add support for AAD authentication to RDP protocol.#1168
aleitner wants to merge 1 commit into
apache:mainfrom
aleitner:GUACAMOLE-2210-AAD

Conversation

@aleitner

@aleitner aleitner commented Feb 13, 2026

Copy link
Copy Markdown
Contributor

Client-side support for the Azure AD (Entra ID) device code sign-in flow used by RDP connections. Paired with apache/guacamole-server#633.

What it does

When an RDP connection uses security=aad, guacd sends a device code prompt (user code and verification URI) to the browser over a pipe stream. This change:

  1. Renders that prompt as a QR code the user scans to sign in on a separate device, alongside the user code and a link fallback.
  2. Registers a handler for the device code pipe stream by name.
  3. Dismisses the prompt automatically when guacd closes the stream (on success, failure, or expiry) or the connection drops.

Configuration

Adds aad-client-id, aad-scope, and aad-tenant-id fields to the RDP connection form (the security option already offered aad), with matching field labels and prompt strings.

Dependencies

Adds qrcode-generator (MIT) for QR rendering, with its license registered under doc/licenses/.

Paired with apache/guacamole-server#633

@eugen-keeper eugen-keeper left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mike-jumper
mike-jumper changed the base branch from staging/1.6.1 to main July 14, 2026 03:52
@aleitner
aleitner force-pushed the GUACAMOLE-2210-AAD branch 2 times, most recently from 6feb1c3 to 02fa609 Compare July 21, 2026 17:09
@aleitner
aleitner force-pushed the GUACAMOLE-2210-AAD branch from 02fa609 to ad329fe Compare July 21, 2026 17:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants