Hardware Ready Ready to Bench?
Microsoft Entra support. FreeRDP 3.32.0, released on September 23, 2026, brings a significant update for Linux users accessing Windows systems: Microsoft Entra integration is now available in the SDL and xfreerdp clients. The release also includes improvements to RemoteApp, RDP protocol security, and new features related to Wayland, USB, and webcams.
The open-source project implements the Remote Desktop Protocol and is used to establish sessions to Windows computers from Unix-like systems. In addition to Entra integration, this version introduces an experimental path for video acceleration via FFmpeg.
Microsoft Entra support: why it matters
Interest in Microsoft Entra authentication stems from the growing integration between corporate identity and remote access. Microsoft indeed supports Entra authentication in RDP connections to compatible Windows devices, provided that the remote computer is correctly configured.
The main change concerns authentication itself. FreeRDP integrates seamless support for Microsoft Entra and Azure in the SDL and xfreerdp clients, but optimal operation requires the presence of specific helper binaries. Updating only the client does not automatically guarantee all features related to Microsoft identity; components present on the Linux distribution and the remote service configuration also play a fundamental role.
This novelty fits into a context where Microsoft makes the Microsoft Identity Broker available for Linux systems. This component allows using Entra credentials to achieve Single Sign-On between supported applications and resources. Microsoft documentation specifies that the name used for the RDP connection must match the hostname registered in Entra and be reachable via network; direct access via IP address is not supported for this specific authentication flow.
FreeRDP also improves the RemoteApp experience. The SDL client introduces beta support for RAIL (Remote Application Integration Layer), both for X11 and Wayland. This allows integrating individual Windows applications into the Linux desktop without having to display the entire remote session. The xfreerdp client receives dedicated fixes for RemoteApp windows, including a fix to prevent unexpected resizing.
On the multimedia front, hardware acceleration has been revised from a limited VA-API implementation to a more generic approach based on FFmpeg. This solution is currently considered experimental due to possible differences between various graphics drivers.
What changes and what are the effects
The release also pays attention to devices redirected via RDP. RDPEUSB redirection corrects the handling of matching between USB interface indices and numbers, aiming to improve compatibility with peripherals that previously could present problems. Regarding webcams, RDPECAM stops the video stream when the remote system no longer requests frames, preventing the camera from remaining active unnecessarily after closing the Windows application that was using it.
At the protocol level, FreeRDP fully implements the Early User Authorization Result PDU. In case of denied authorization, a specific authentication error is now generated instead of being interpreted as a generic network problem. The proxy also undergoes a significant modification: the default policy for certificates changes from a model that accepts them unless explicitly rejected to one that denies them unless explicitly accepted. Existing configurations based on previous behavior may require review.
The development team also reports numerous interventions aimed at correcting protocol violations and potential vulnerabilities, identified through code reviews and security reports. For system administrators, the value of this release lies not only in new features but also in the need to verify compatibility, authentication, certificate policies, and components available on the client system.
Source and further reading on Microsoft Entra support: original article.
* Content created with the assistance of artificial intelligence systems.