[hdgvhicv]

I use apache guacamole for this with our OIDC proxy for this purpose

[notepad0x90]

I've used it before, setting it up wasn't pleasant with the whole java/tomcat thing, and it kept having severe vulnerabilities.

[MaKey]

FYI, Azure Bastion is based on Apache Guacamole. You're paying them for not having to manage your own instance.

[notepad0x90]

That tracks, that's all Azure is there to do in the end. If it was easy to manage it myself, I'd do it, and I'd still need to pay them for a VM to host it on, along with traffic costs. But bastion isn't cheap, so something to consider for sure.