Web Sign-In with Hybrid Joined machines?

Question

The Web Sign In feature appears to only work with AAD joined devices. Is there a road map to have Hybrid Joined devices support this as well?

If an enterprise wants to go passowrdless and set the AD accounts to require smart card logon (aka Windows Hello), the temporary access pass makes the most sense to provision a new user. Yet it is not supported on Hybrid Joined machines which doesn't make sense since there is no other documented way to provision users with password disabled.

Is there another workaround?

Answer 1

Hello @Michael Eng ,

Thanks for reaching out.

Yes, Web sign-in is only supported on Azure AD Joined PCs as of today. However, web Sign-In with Hybrid Joined machines feature is in under consideration but unfortunately, we don't have any ETA as of today. Meanwhile, you can alternatively try onboarding users with certificates-based authentication, FIDO2 for password less authentication.

Hope this helps.

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.