Windows Hello for Business - PIN Reset Flow

Hi all,

I'm a bit confused on the PIN reset flow for Windows Hello for Business from the login/lock screen.

We are testing this with two Entra Joined devices with two accounts that are Entra Joined

When one device starts the PIN reset/I forgot my PIN from the logon screen, they are prompted to use MFA credentials, this is what I want

With another user, they are asked to "veryify it's them" and they need to enter a password.

I'm not sure what's casuing the difference and why one is being asked for a Password and the other is following the correct MFA flow.

Just to note, if I assigned TAP to the account I'm having an issue with, they are prompted for the TAP and can reset the PIN, no password required.

I'm not sure why the process is asking for a password in one instance and MFA in another.

Thanks