Forum Discussion
Kiril
Nov 22, 2022Iron Contributor
How can I use "Windows Hello for Business" as passwordless sign-in on my laptop?
I have activated Windows Hello for Business using an Intune configuration profile. Now that it's activated - how can I use it? It does not appear as sign-in method when I'm prompted with sign-in wind...
BilalelHadd
Nov 24, 2022Iron Contributor
You're completely correct regarding the link that I've shared.
Did you also think of the apps and services that need to authenticate (with SSO, e.g.)? Password-less goes further than only logging in with strong authentication.
For accessing legacy apps and services, I would recommend the Hybrid Cloud Trust. If you are sure that all apps and services are SSO compatible, then you should be fine.
Could you share a screenshot with the configuration profile you've created for WhFB?
Did you also think of the apps and services that need to authenticate (with SSO, e.g.)? Password-less goes further than only logging in with strong authentication.
For accessing legacy apps and services, I would recommend the Hybrid Cloud Trust. If you are sure that all apps and services are SSO compatible, then you should be fine.
Could you share a screenshot with the configuration profile you've created for WhFB?
Kiril
Nov 24, 2022Iron Contributor
BilalelHadd , sure:
What is kind of strange, is that some users in our tenant are missing the Authentication method "Windows Hello for Business" in the User profile in Azure. Is there some way to re-join Azure in order to get the sign-in method?
- KirilNov 25, 2022Iron Contributor
Thank you. I will take a closer look at your recommendation and update the thread.
- BilalelHaddNov 25, 2022Iron ContributorPlease make sure that the devices are AAD joined. When they are, ensure that the configuration profile, as shown in the screenshot, is assigned to the devices.
Regarding your question, It won't be registered as an authentication method if they haven't set up Windows Hello for Business.
Small reminder, as stated yesterday, the WhFB trust type only impacts how the device authenticates to on-premises AD. So don't forget to do your research.