Users can now use their face or fingerprint to sign in to their Windows computer, providing a fast and secure passwordless experience. After a one-time setup, they can unlock their device without needing to enter a password or approve a push notification.
Before you begin
-
Enable the offline biometrics feature.
-
User devices must have a Windows Hello compatible fingerprint reader or a facial recognition camera.
-
Confirm that users have already enrolled facial or fingerprint biometrics in Windows Hello.
If they haven't, they can go to in Windows.
-
Register user biometrics with Okta.
The first time a user signs in after you enable this feature, they need to register their biometrics with Okta.
-
Sign in to their Windows computer with their Okta password.
-
After they sign in, an Okta Verify window appears, prompting the user to configure a passwordless sign-in option.
-
Then they follow the on-screen instructions to register their Windows Hello fingerprint or facial biometric. This links their local biometrics with their Okta account for secure offline verification.
-
Sign in using passwordless.
After registration is complete, all future sign-in flows are passwordless.
-
At the Windows sign-in screen, the system prompts the user for their face or fingerprint.
-
Users can scan their fingerprint or look at the camera to sign in instantly.
This method works even if a user's computer isn't connected to the internet.