Bastion Native Client
Integrates with Microsoft Entra ID (formerly Azure AD) for multi-factor authentication (MFA) and conditional access rules. How to Configure Bastion for Native Client Connections
Configure Bastion for native client connections - Microsoft Learn bastion native client
Native clients support seamless file uploads and downloads (via SCP or RDP copy-paste), which is a major advantage over the standard web portal. Integrates with Microsoft Entra ID (formerly Azure AD)