Introduction
This document provides step-by-step instructions for enrolling Face and PIN credentials for MFA authentication from the Windows lock screen using the Windows Login application. Once enrolled, users can authenticate using Face verification followed by PIN authentication.
Prerequisites
In Tenant Admin Portal, you must enable Allow Credential Updates and Enrollment to enroll credentials in Windows Login app. For more details, refer to How to enable Allow Credential Updates and Enrollment in Windows Login application
Ensure that either the user’s Primary ID or email ID matches the username configured in the Tenant Admin Portal.
Face and PIN credential should be enabled in the Windows Login application.
You must enable the Face followed by PIN MFA toggle in the Windows Login application. For more, refer to Windows Login - How to Enable Face Followed by PIN MFA.
Steps to Enroll Face
On the Windows lock screen, click Login with OLOID.
The Windows login app opens and the Welcome page is displayed.
Select Login with Face.
The Windows login app opens and the camera turns on.
Place your face in front of the camera for facial authentication.
The Face authentication fails and the Missing Credentials screen is displayed.
Click Enroll Credential.
The Verify using Windows Credential screen is displayed.
Do the following:
Enter Domain Name
Enter your Windows domain name.
Enter Username.
Use your Windows account username.
Enter Password.
Use your Windows account password.
Select Enroll Windows credential to your account. (Optional)
Click Continue.
The Select Credential to Enroll or Update screen is displayed.
Select Face.
Note: If connection is enabled, user consent is requested before uploading the picture.
The camera turns on.
Place your face in front of the camera for face authentication.
Are you happy with picture pop-up box is displayed.
Click Yes, Submit.
Note: Click No, Retake if you want to retake the picture.
The Face credential is enrolled successfully, and Enrollment Successful pop-up is displayed.
Note: You can enroll up to 5 Face credentials for a single user.
Steps to Enroll Pin
Click Credential Face, Badge OR NFC.
The Select Credential to Enroll or Update Pop up is displayed.
Select PIN.
Do the following:
Enter new PIN.
Re-enter new PIN.
Click Submit.
Note: You can configure PIN credentials in the Tenant Admin Portal. For more details, refer to How to configure PIN
The PIN credential is enrolled successfully.
Sample Screen
Note: If the Face is already enrolled and PIN is not enrolled then Missing Credentials screen is displayed. Click Enroll Credential to Enroll the PIN.
Keywords
|Enroll Face and PIN credential in Windows Login |Windows Login Face credential enrollment |Windows Login PIN credential setup|