vscode-remote-ssh does not work with SSH using Azure AD authentication

We are trying to implement remote development model with project specific VMs in Azure and allow users to connect from VS code using Azure AD authentication with MFA. It works great with Public keys but not with Azure AD authentication.

There were some recommendations of disabling localserver option and enable console, so users can click on the device login link and enter code. However, that model is deprecated by Microsoft. So option currently usable is using az ssh module (or something I couldn't find)

https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-linux

Appreciate any guidance on how to configure authentication for this model

You need to follow the steps to enable AD login for users as already mentioned in the Microsoft Document.

Steps which are mandatory or required to perform a ssh from vscode using az-cli:

1. While creating a VM , Please ensure you have the Login with Azure AD preview Enabled and please open the SSH, HTTP and HTTPS port :

   

2. In Visual Studio Code , Please ensure to have Azure CLI has the extension ssh installed for az module. To install you can follow the below 2 commands:

   az login # login using your Azure AD user credentials
   az extension add --name ssh # install the ssh extension
   

3. Please make sure before using the user to signin to Azure AD you must have that user a rbac role assigned i.e. Virtual Machine Administrator Login/ Virtual Machine User Login

   If you don't provide the user the role you will face the below error :

   

   To assign the roles , you can go the VM in Portal >> Access Control(IAM)>>add role assignment>> select VM admin login /VM user login >> add the users and assign.

   

4. Once the above is done you will be able to SSH to the VM using az module from vscode like below:

   Commands:

   az login # user who will login need to authenticate
   az ssh vm -n vmname -g resourcegroupname # SSH to the VM
   

   

Update:

Second Part of the question after the above is how to use remote desktop from VSCODE using azure ad credentials:

1. Run these 2 commands in vscode:

   az login
   az ssh config --ip VMPublicIP --file C:\Users\user\terraform\sshconfig # saves the config file with your azureadcredentials
   

   

2. Copy the whole context of the file which was downloaded using the above command to remote-ssh config files for the VM.

   

3. After the above is done do connect to host for the same file that you have configured for the above step.