Windows 10: On-Premises MFA Support for Windows Hello

We have an on-premises Active Directory environment with domain-joined devices and cannot use cloud services.Given the following documentation:"As of July 1, 2019, Microsoft no longer offers MFA Server for new deployments.""After September 30, 2024, Azure MFA Server will stop servicing MFA requests, and organizations must migrate to cloud-based Azure MFA."Is Windows Hello for Business still supported in a fully on-premises setup for MFA? If not, what alternative MFA options are available for environments that must remain fully on-premises?

:)

 

Powershell commands to query On Premises MFA Server

What powershell commands are available to query On Premises MFA Server to report on users who have successfully installed and activated their MFA accounts?

 

MFA for on premise application.

Why do you need MFA for on-prem? User has already been authenticated on the network.

 

Windows Hello MFA (PIN + Password)

Hello everyone,

We are trying to set up Windows Hello and MFA at Windows login.

Our users are not ready at the moment to use biometrics method like fingerprint, face recognization or pairing personnal device. (I know its not optimal...In IT Team we have already setup fingerprint or face recongization, but its for end users who are less openminded about this..)

I use settings catalog in Intune.

Group A

{D6886603-9D2F-4EB2-B667-1971041FA96B}

Group B

{60b78e88-ead8-445c-9cfd-0b87f74ea6cd}

Sadly, if user login with password it bypass windows hello second step

If i select manually PIN, it ask for password for the second step (Goal of our project).

In this configuration password is still prompted at first step of authentication and PIN not asked for the second step.

There is a solution to force PIN in first step ?

Thanks you for your help =)