We need to To enable the the security keys as a sign-in option for our Windows 10 devices in , we have to use Microsoft Intune. In Intune this can be done by enabling this as part of , there are two options:
(1) for all users - a tenant wide Windows Hello for Business setting for all users
(WHfB) setting or by deploying 2) for a group of users - an Identity Protection configuration policy .Using this first option is a tenant wide setting for all users.for a group of users
Option 1: Tenant wide for all Users
Open a browser to and sign-in to the Microsoft Intune portal.
...
- Click Windows Hello for Business
- Set Configre Windows Hello for Business to Enabled
- Set Use Security keys for sign-in to Enabled
- Click Save
...
Option 2: Identity Protection configuration policy
. The advantage of using a configuration policy is that you can assign it to a group of users instead of all users.
...
- Set Enable to Yes
- Leave Target set to All or switch to Select users and select a security group
- Click Save
...