As explained in the introduction, we need to create 2 logon procedures for RD Web. One for RD Web Access and the other for RD Web Client. 

Logon Procedure for RD Web Access

For RD Web Access, we must create a Web SSO logon procedure

Once the logon procedure has been created, you need to add logon steps into the newly created logon procedure.

As the logon procedure for RD Web Access is a Web SSO, you can add as many logon steps as you like. And, you can add any type of authentication method in every logon step.

Typically, you will add 2 logon steps.


Logon Procedure for RD Web Access

For RD Web Client, we must create a Remote Desktop Web Client logon procedure

For RD Web Client, the logon procedure must include one logon step only. And, the logon step must include only the authentication method "Out of Band Authentication - Push"