windows-hello for business

Question

Hello,

I am focusing following info from doc.  to create  whfb-cred  for one  entra-id  account  on my personal entra-registered device. Looks like it is possible but I am not able to find the  corresponding policy to  turn it ON Can you help me  where is that  CSP   ??

So just to help you help me,  I am on personal win11 device unlocked by MSA (Microsoft account) using  WHfB   and then from settings trying to add one Entra-ID  account.    I would like to create whfb-cred  for this  entra-id-account   in the same WH-container of MSA 

Answer 1

Looks like nobody from Microsoft wants to take ON this question. @Mark Morowczynski You are always one step ahead helping the community. So let me put my point below in a very objective, binary format for you to answer. This is crucial for my organization as syncable passkeys in windows is around the corner and we need to shape up our passwordless-design.

This question is for both types of  win11  devices.  i.e.,   Entra-id joined devices and  Entra-id registered devices.

 

On Entra-id joined  device,   once I log into device with my Entra-account and create  windows-hello-container,   if I want to enroll my another   Entra-account in that  same  windows-hello-container  can I do that  ?? Basically from  settings --> add work or school account,   I will my add another   Entra-account and that time I also want to create  WH-credential for this account.

 

Exact same thing on Entra-id registered devices that is unlocked by   Microsoft-account (MSA)  using  Windows-Hello. And now from  settings --> add work or school account  I  trying to add one Entra-ID  account.     I would like to create WHfB-cred  for this  Entra-id-account   in the same WH-container of MSA

 

I am focusing following info from  public  doc.  which says that above is possible. But I am not able to find the  corresponding policy to  turn it ON. Can you help me  where is that  CSP   ??

Answer 2

Hello

The main purpose is to configure windows hello for business with csp right?

1. Sign in to the Microsoft Intune admin center
2. Select Devices > Windows > Windows Enrollment
3. Select Windows Hello for Business
4. Verify the status of Configure Windows Hello for Business and any settings that might be configured

Please refer to the following link:

Configure Windows Hello for Business | Microsoft Learn

Answer 3

@Wesley Li

First understand my question, try it out hands-on and confirm and then propose the answer.