The message will include a number that you'll need to enter in the app: You'll be asked to open Microsoft Authenticator and approve the request to sign in. Log in to your Microsoft account or application. If you delete the app, you may be locked out of your account until it can be reset, unless you have set up another authentication method. The next time you log in to a University system, including your University email account, you may need to use it to generate either a notification or a one-time password code (depending on which you chose in the set-up) to verify your identity. Make sure you keep the Microsoft Authenticator app set up on your phone. Please skip this, as it isn't supported at present. You may see a message asking if you want to enable signing in without a password. The deployment might get complicated based on your current environment.Follow the instructions on screen, using your mobile device to scan the QR code displayed on your browser.

WHfB is NOT the same as Windows Hello, even though it has exact same words in it (I know, right). Basically, WHfB replaces username and password sign-in to Windows with strong user authentication based on an asymmetric key pair. Authentication app is not supported for this scenario. You can still achieve passwordless login for domain accounts (hybrid or on-prem) using Windows Hello for Business (WHfB) via device PIN, biometrics, smart card or FIDO2 key. Also, it is currently in preview with no clear ETA, so it might not be ready for production yet.Īzure AD account or AD account on hybrid AAD hybrid-joined device or domain device Unfortunately it is supported only on Azure AD joined devices, but not on hybrid PCs.

There is a feature which is called Web sign-in and it allows signing in to Windows using Azure AD account and Authenticator app. are fully supported for passwordless login to Windows 10/11 using Authenticator app.Īzure AD accounts (work or school) on Azure AD joined devices

The solution would depend both on user account type and device type.Ĭurrently only personal Microsoft accounts (e.g.

Microsoft mfa login