Forum Discussion

julien_Gfi's avatar
julien_Gfi
Copper Contributor
Jun 16, 2020

How to set passwordless authentication for new user in company

Hi, 

 

In case of new user that join the company . How to set a passwordless authentication for the firs time logon experience?

 

My scenario is: 

  • User was created in Active directory (With random password)
  • Replicated in Azure AD with AD connect (Password Hash)
  • New laptop with autopilot profile Hybride Azure Ad domain join and Windows hello for business strategy

How i can deal with zero password for the new user?

 

Thanks

  • julien_Gfi The user will have to use the password once. If enabled, the user than goes through the Windows Hello for Business wizard to provide a PIN. Since the pin is thight to the device, you cannot set up the PIN for the user. 

     

    For Azure AD/Office passwordless sign-in, users need to register first using https://aka.ms/mfasetup. When enabled, users can register Microsoft Authenticator and enable phone-sign in afterward or add FIDO2 keys to sing-in wihouth passwords.

  • julien_Gfi The user will have to use the password once. If enabled, the user than goes through the Windows Hello for Business wizard to provide a PIN. Since the pin is thight to the device, you cannot set up the PIN for the user. 

     

    For Azure AD/Office passwordless sign-in, users need to register first using https://aka.ms/mfasetup. When enabled, users can register Microsoft Authenticator and enable phone-sign in afterward or add FIDO2 keys to sing-in wihouth passwords.

Resources