MicrosoftMicrosoftThanks for this well-written article!
Allow me one correction please:
- To adhere to https://pages.nist.gov/800-63-3/sp800-63b.html#memsecretver800-63B Section 5.1.2.2 requirements of activation factor (PIN) at least 8 characters long, configure https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-manage-in-organization#group-policy-settings-for-windows-hello-for-business Group Policy setting for PIN Complexity to be at least 8 characters (no complexity rules are required, PIN can be digits only).
The correct section is https://pages.nist.gov/800-63-3/sp800-63b.html#memsecretver.2 😉
