We have WHfB Certificate Trust deployed. I have tested facial recognition, fingerprint, and PIN. All three will work with RDP, however I find it annoying that when using the facial recognition factor, I must look into the camera and click OK on the RDP app once I'm recognized. If I am using multiple monitors and must turn my face away from my camera so I can see where to click in the RDP app on a separate monitor, facial recognition changes status and the OK button goes away before I have a chance to click it! Not a good feature design when we live in a world where multiple monitors is the standard. It would be good if, once facial recognition has identified me, that the OK button locks on. Even better, what if the OK button isn't even necessary and facial recognition is automatically acknowledged by the app with out clicking a button. That's true single sign-on.