Authentication flow diagram
Shows how TruGrid routes authentication based on trusted vs untrusted source IP
Office network
Trusted IP range
Workstation
Managed
TruGrid Portable
Deployed
On-prem AD
Local network awareness
Remote / home
Untrusted IP
Laptop
User-managed
TruGrid Connector
Installed
Entra ID + MFA
Conditional access enforced
TruGrid CloudShield
IP check + relay assignment
AD credentials
Entra token / CA
TruGrid Relay
Brokered RDP session
Full desktop
/
RemoteApp
No MFA required
TG-APPS shortcuts
Direct launch
MFA enforced
No shortcuts
Conditional access