...
The client needs to connect to various services. But how does the client know the address/endpoint of those services?
The answer lies in a another service called the Autodiscover Service, which provides the endpoints of those services to the clients in a JSON document.
The Autodiscover Service can be a part of an MFA Server. For instance, the DualShield MFA server includes Currently, two servers/portals include the Autodiscover Service for Computer Logon MA:
| Server/Portal | Autodiscover URL |
|---|
| DualShield | https://DUALSHIELD-FQDN/sso/v1/computerLogon/check |
| Computer Logon Management Portal | https://dn-clo-ma-{entra-tenant-id-without-dash}.azurewebsites.net/api/computerLogon/check |
If you are not using the DualShield MFA server, such as Entra MFA, then you need to install the Computer Logon Management Portal , which also includes the Autodiscover Servicein your Entra ID tenant.
Finally, how does the client find the Autodiscover Service URL?
...
- On-Prem AD joined
- Entra ID joined
- Hybrid joined
Reference:
| Expand |
|---|
| title | Reference: How to find the computer's domain membership...... |
|---|
|
| Include Page |
|---|
| How to find the domain membership of a Windows PC |
|---|
| How to find the domain membership of a Windows PC |
|---|
|
|
On-Prem AD joined PC
On an on-prem AD joined PC, the logon client queries the on-prem DNS server for a TXT record named "dscloma". The value of the TXT record is the URL of the Autodiscover Service.
References:
| Expand |
|---|
| title | TXT Record in On-Prem DNS for the DualShield Server... |
|---|
|
| Include Page |
|---|
| DualShield6:S3 : TXT Record in On-Prem DNS for the DualShield Server |
|---|
| DualShield6:S3 : TXT Record in On-Prem DNS for the DualShield Server |
|---|
|
|
| Expand |
|---|
| title | TXT Record in On-Prem DNS for the Computer Logon Management Portal... |
|---|
|
| Include Page |
|---|
| DualShield6:S2 : TXT Record in On-Prem DNS for the Computer Logon Management Portal |
|---|
| DualShield6:S2 : TXT Record in On-Prem DNS for the Computer Logon Management Portal |
|---|
|
|
Entra ID joined PC
If you have installed the Computer Logon Management Portal in your Entra ID tenant, then the computer logon client on your Entra ID joined PCs will be able to automatically find the Autodiscover Service URL provided by the Management Portal without any further configuration.
If you do not install the Computer Logon Management Portal, then the logon client queries the Entra DNS service for a TXT record named "dscloma". The value of the TXT record is the URL of the Autodiscover Service.
| Expand |
|---|
| title | TXT Record in Entra DNS for the DualShield Server... |
|---|
|
| Include Page |
|---|
| DualShield6:S1 : TXT Record in Entra DNS for the DualShield Server |
|---|
| DualShield6:S1 : TXT Record in Entra DNS for the DualShield Server |
|---|
|
|
Hybrid joined PC
Hybrid joined PCs are basically treated the same as On-Prem joined PCs. The logon client queries the on-prem DNS server for a TXT record named "dscloma". The value of the TXT record is the URL of the Autodiscover Service.
References:
| Expand |
|---|
| title | TXT Record in On-Prem DNS for the DualShield Server... |
|---|
|
| Include Page |
|---|
| DualShield6:S3 : TXT Record in On-Prem DNS for the DualShield Server |
|---|
| DualShield6:S3 : TXT Record in On-Prem DNS for the DualShield Server |
|---|
|
|
| Expand |
|---|
| title | TXT Record in On-Prem DNS for the Computer Logon Management Portal... |
|---|
|
| Include Page |
|---|
| DualShield6:S2 : TXT Record in On-Prem DNS for the Computer Logon Management Portal |
|---|
| DualShield6:S2 : TXT Record in On-Prem DNS for the Computer Logon Management Portal |
|---|
|
|
Reference:
| Expand |
|---|
| title | How to look up a TXT record from a Windows PC... |
|---|
|
| Include Page |
|---|
| How to look up a TXT record from a Windows PC |
|---|
| How to look up a TXT record from a Windows PC |
|---|
|
|