Background

I’ve recently been deploying a new enterprise setup for my company. Part of this process involves configuring device registration with an Azure Hybrid Active Directory. We also decided to use Active Directory Federation Services (AD FS) with Multi Factor Authentication (MFA).

While setting up one of the machines I ran into the above screen while trying to setup Windows Hello for Business, AKA a pin for the user I was logging in as. The proves to be a problem as most businesses will restrict what resources you’re allowed to access when a pin isn’t configured.