Amazon AppStream 2.0 has introduced certificate-based authentication (CBA) for multi-session fleets running Microsoft Windows and joined to Active Directory.

• Enables passwordless authentication through SAML 2.0 identity providers
• Provides single sign-on access to domain-joined desktop and application streaming sessions
• No additional cost in regions where AppStream 2.0 is available
• Requires AppStream 2.0 agent released after February 7, 2025, or managed image updates after February 11, 2025
• Balances cost-efficiency with improved user experience

This new feature enhances security and simplifies the login process for AppStream 2.0 users by leveraging certificate-based authentication.