> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/windows-workstation-mfa/deployment-scenarios/entra-joined-workstations.md).

# Entra Joined Workstations

***

### What to Expect

Entra ID joined machines are Windows devices that are joined directly to Microsoft Entra ID rather than to an on-premises Active Directory domain. This model is increasingly common in cloud-first and hybrid organisations where traditional domain infrastructure is being reduced or eliminated.

{% hint style="warning" %}
**Beta** This feature is currently in Beta and available for testing. The information below reflects planned scope and is subject to change. No configuration steps or user guidance are provided on this page until the feature reaches general availability.
{% endhint %}

### In the Meantime

For organisations that require MFA on Windows devices managed through Entra ID today, the following interim options may be applicable:

| Option                                     | Description                                                                                                                                                                                                                                                                                                                                                           |
| ------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Hybrid Entra ID Join                       | Join machines to both on-premises AD and Entra ID; deploy the 1Kosmos Credential Provider using the standard domain-joined model                                                                                                                                                                                                                                      |
| Microsoft Entra ID external authentication | 1Kosmos integrates with Microsoft Entra ID as an external authentication provider for app and web access; see [1Kosmos + Microsoft Entra ID Integration](https://www.1kosmos.com/platform/resources/integrations/microsoft-entra-verified-id?utm_campaign=46345118-Developer%20Center\&utm_source=docsite\&utm_medium=website\&utm_content=entra-id-link) for details |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.1kosmos.com/authentication/windows-workstation-mfa/deployment-scenarios/entra-joined-workstations.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.