WHFB On-Prem MFA Requirement Clarification

[kklouzal]

It needs to be clearly noted that Windows Hello For Business Multi-Factor Authentication requirement can be fulfilled by using ADFS Certificate Authentication. It is very misleading for users attempting to grasp this complicated implementation when the docs do not have all the available information present. This is especially true for those of us attempting a 100% on-prem configuration and being pushed towards Azure MFA.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 145edd19-d1ef-2724-94d4-779561580a0e
• Version Independent ID: 19035969-fd7a-714f-bd13-7172e745013c
• Content: Validate and Deploy MFA for Windows Hello for Business with certificate trust - Windows security
• Content Source: windows/security/identity-protection/hello-for-business/hello-cert-trust-validate-deploy-mfa.md
• Product: m365-security
• GitHub Login: @mapalko
• Microsoft Alias: mapalko

[michaelAngeloEgypt]

I want to add the image from the poster's comment to the article, but I don't have push access to the folder https://github.com/MicrosoftDocs/windows-itpro-docs/tree/public/windows/security/identity-protection/hello-for-business/images

[mapalko]

I am no longer the area owner for this docs section.

[yogkumgit]

@paolomatarazzo can you please help here, or please let me know who is the right person to approach for this. Thanks