PIN Reset with domain joined and Azure registered windows 10

Hello,

As a network admin, I am working to start using Windows Hello for some users.  I have a surface device (Windows 10 Pro 1803) that is domain joined and registered with Azure, and when setting up windows hello with face recognition, including a PIN, I am now trying to figure how to do a reset of the PIN.  In settings->Accounts->Sign-in options, it does not have a pin reset link, and at login when attempting to reset the pin, I am prompted for password but when logging in, it just says "This device is not currently joined to your orgtanization. Please contact your administrator".

Any ideas?

Note: I do not run the Windows Hello for Business infrastructure, this is just a convenience PIN to my understanding.