Anyone running RDS HTML5 through Entra App Proxy with FSLogix and Hybrid Join?

I’m looking for feedback from anyone running a similar setup:

On-prem AD

RDS with multiple session hosts

RD Web HTML5 published through Entra Application Proxy

FSLogix profiles

Microsoft 365 Apps with Shared Computer Activation

Entra Connect Sync

The setup is working, but Microsoft 365 sign-in inside the RDS sessions is inconsistent. Some users have manually added their account under Access work or school, which has created duplicate user-owned device registrations.

I’m planning to hybrid join the session hosts so users can get better SSO for Outlook, Teams, OneDrive, and Office when they log into RDS.

Has anyone done this successfully? Any issues FSLogix roaming, MFA, Conditional Access, duplicate device registrations, or users moving between session hosts?

Mainly looking for any warnings or words of wisdom!