We have issues with users connecting to their netbird instance (payed Cloud, MSP).
We have setup Microsoft 365 as IdP for logon and connecting netbird. That basically works very well.
However, we see big issues with endusers that have setup their own windows PC and connected it to a Micrsoft account of their own. Usually, that account is then also pre-authenticated in their browsers. Mostly Edge, but we have seen Chrome too.
When Netbird prompts to connect, the users select “Login with Microsoft” and they are logged in with their currently active Microsoft profile. Unfortunately, this is not the one they are supposed to login with, but Netbird does not care.
The result is that Netbird is actually “connected”, but with a free netbird cloud account (?) that has no setup. And thus they cannot connect anywhere.
One workaround is to make sure that the user is not authenticated in his browser before netbird connect. If he is not, the login procedure actually points to the correct server.
The problem here is that we cannot explain each and every user that they first have to logout from their MS account in the browser. Most users do not know what we talk about anyway. Opening an InPrivate browser session before Netbird connect has not the effect we hoped. Depending on user setup, they are still logged in to Micosoft in that session too.
Another workaround is to tell the user to choose “Login with Entra”, but that works only as long as the user is not logged in on another Office 365 account as well (often the case with students using the O365 school account and also the O365 workaccount from where they work).
So this is complicated, mostly due to the fact Netbird is mostly used with enterprises. What is yuour setup? Is this for end-users that need access to one of your services? Homelab? Or what do you manage in the end that requires your specific brand of end-users.
If you are an enterprise, you should be able to pre-configure a ton of this for your users.
Those are users working as teachers in a school. Some of them are working part time and are employees of another company with office365.
Depending on which o365 account is currently active in their browser, they are logged in with those credentials to netbird.
The second case is when they are not in another company o365 instance, but are logged in to their Microsoft account. Also here, the user is logged in and netbird connects.
The problem comes now for both cases. Due to netbird allows anyone to login even when they do not have an account at netbird yet. In both cases above, users are logged in to netbird, but not to the correct (our) account. Our accounts settings never apply…
The user thinks he is connected, but “nothing works”.
One workaround is not to use “Login with Microsoft”, but to use “Login with Entra”. That works for the second case, but not for the first case.
Those are users that are not computer geeks. We can only explain so much h, but from the user perspective, netbird just does not work, even when they are logged in…
Not sure if I come across with the real problem. It is only partial netbird.
Unfortunately, I can’t go with this. Almost all of the devices are not under my control. Many BYOD.
I believe that the netbird cloud should show some indication that the account the user logs in with, actually has a working environment and does not automatically assume that this is a new user that wants to setup a new environment.
Something like:
“Welcome! You do not seem to have a netbird environment setup with this login. Would you like to setup a new account or do you want to connect to an existing environment?”
but at least you could control where the links go.