Authentication flow diagram
Shows how TruGrid routes authentication based on trusted vs untrusted source IP
Office network
Trusted IP range
Workstation
SCCM-managed
Portable
SCCM-deployed
On-prem AD
Local network awareness
Remote / home
Untrusted IP
Laptop
User-managed
Connector
Installed
Entra ID + MFA
Conditional access enforced
TruGrid cloud service
IP check + relay assignment
AD credentials
Entra token / CA
Azure relay
Brokered RDP session
Full desktop
/
RemoteApp
No MFA required
TG-APPS shortcuts
Direct launch
MFA enforced
No shortcuts
Conditional access