Windows Hello for Business replaces passwords with multi-factor authentication on users’ devices. It consists of an authentication method that is tied to the device and uses a biometric or PIN. SecureLogin supports integrating Windows Hello for Business. After the integration, you can use the Windows Hello for Business method to protect the SecureLogin icon and reauthenticate applications.
SecureLogin can access the datastore using a biometric or PIN. When Windows Hello for Business is configured in your environment, SecureLogin provides users a seamless single sign-on experience to their devices.
NOTE:If you want to change the login method from password to Windows Hello for Business or vice versa, you must provide the passphrase to update the login method.
Using Windows Hello for Business with SecureLogin, you can achieve the following goals:
Access user data store using biometric or PIN.
Protect the SecureLogin icon. See Protecting the SecureLogin Icon by Using Windows Hello for Business.
Reauthenticate users. See Reauthenticating Users by Using Windows Hello for Business.
IMPORTANT:To use Windows Hello for Business, ensure that AES is configured for the data encryption. The Triple DES encryption is not supported for Windows Hello for Business.