Windows Hello for Business - Multi-Factor Unlock - Wireless Trusted Signal WPA3

Hy,

Windows 10 and 11 natively support WPA3 networks, and the trusted signal configuration allows for custom security types.

In practice, if your Windows devices can connect to a WPA3 network, you can use the SSID and other Wi-Fi parameters as part of your trusted signal rules for multi-factor unlock.

Requirements

Windows 10 or 11 Pro/Enterprise, fully updated

Device must support Windows Hello for Business and be managed (e.g., via Intune)

TPM and biometric hardware (if using biometrics)

Proper licensing (Microsoft Intune P1 or higher)

Example

The xml should look something like that i think:

<signal type="wifi">
  <ssid>YourCorporateSSID</ssid>
  <security>WPA3-Enterprise</security>
</signal>

Good luck!