Tenant-isolasjon
via MASQUE Omvei

Devices managed by a different organisation's MDM need access to Azure Virtual Desktop in a specific tenant, but can become neither Intune Compliant Device nor use GSA there — both require tenant membership the device cannot have. This case study describes a three-layer architecture — built on the MASQUE relay primitive — that provides secure, enforceable access restricted to exactly that one tenant.

Navigate with the arrows.

Contents