Create a Windows Hello profile to configure Windows Hello for Business for your Windows Desktop devices so end users can access your applications, websites, and networks without entering a password.

Important:

Windows Hello profiles only apply to devices enrolled through Azure AD integration.

To configure a Windows Hello profile, follow the steps detailed below:

  1. Navigate to Devices > Profiles > List View > Add and select Add Profile.

  2. Select Windows and then select Windows Desktop.
  3. Select Device Profile.
  4. Configure the profile General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  5. Select the Windows Hello profile and configure the settings:

    Settings Descriptions
    Biometric Gesture Enable to allow end users to use the device biometric readers.
    PIN requirements
    TPM

    Set to Require to disable Passport use without a Trusted Protection Module installed on the device.

    Minimum PIN Length Enter the minimum number of digits a PIN must contain.
    Maximum PIN Length

    Enter the maximum number of digits a PIN can contain.

    Digits

    Set the permissions level for using digits in the PIN.

    Upper Case Letters Set the permissions level for using upper case letters in the PIN.
    Lower Case Letters Set the permissions level for using lower case letters in the PIN.
    Special Characters Set the permissions level for using special characters (! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~) in the PIN.
  6. Select Save & Publish to push the profile to devices.