...
The answer lies in another service called the Autodiscover Service, which provides the endpoints of those services to the clients in a JSON document.
The Autodiscover Service can be a part of an MFA Server. For instance, the DualShield MFA server includes Currently, two servers/porals include the Autodiscover Service for Computer Logon MA:
| Server/Portal | Autodiscover URL |
|---|---|
| DualShield | |
| Computer Logon Management Portal | https://dn-clo-ma-{entra-tenant-id}.azurewebsites.net/api/computerLogon/check |
If you are not using the DualShield MFA server, such as Entra MFA, then you need to run the Computer Logon Management Portal, which also includes the Autodiscover Service.
Finally, how does the client find the Autodiscover Service URL?
...
| Expand | ||||||
|---|---|---|---|---|---|---|
| ||||||
|
On-Prem AD joined PC
On a on-prem AD joined PC, the logon client queries the on-prem DNS server for a TXT record named "dscloma".
Entra ID joined PC
Hybrid joined PC
...