The Computer Logon Modern Authentication solution consists of many components, including:
The client needs to connect to various services. But how does the client know the address/endpoint of those services?
The answer lies in another service called the Autodiscover Service, which provides the endpoints of those services to the clients in a JSON document.
Currently, two servers/porals include the Autodiscover Service for Computer Logon MA:
| Server/Portal | Autodiscover URL |
|---|---|
| DualShield | |
| Computer Logon Management Portal | https://dn-clo-ma-{entra-tenant-id}.azurewebsites.net/api/computerLogon/check |
If you are not using the DualShield MFA server, such as Entra MFA, then you need to run the Computer Logon Management Portal.
Finally, how does the client find the Autodiscover Service URL?
The answer depends on the computer's domain membership. There are 3 types of PCs:
On a on-prem AD joined PC, the logon client queries the on-prem DNS server for a TXT record named "dscloma".