web sign-in - federation

This commit is contained in:
Paolo Matarazzo 2023-09-12 17:04:22 -04:00
parent 79529dfc26
commit 50f7b3310e

View File

@ -67,7 +67,7 @@ Alternatively, you can configure devices using a [custom policy][INT-1] with the
## User experiences
Once the devices are configured, a new sign-in experience becomes available, as indicated by the presence of the Web sign-in credential provider :::image type="icon" source="images/web-sign-in-credential-provider.svg" border="false"::: in the Windows lock screen.
Once the devices are configured, a new sign-in experience becomes available, as indicated by the presence of the Web sign-in credential provider - :::image type="icon" source="images/web-sign-in-credential-provider.svg" border="false"::: - in the Windows lock screen.
:::image type="content" source="images/lock-screen.png" lightbox="images/lock-screen.png" alt-text="Screenshot of the Windows lock screen showing the Web sign-in credential provider.":::
@ -75,7 +75,7 @@ Here's a list of key scenarios that are supported by Web sign-in, and a brief an
:::row:::
:::column span="3":::
**Passwordless first sign-in experience**: users can perform the first sign in to Windows passwordless, before enabli Windows Hello for Business. For example, using Microsoft Authenticator in the Web sign-in flow. When used in conjuction with passworless, the organization can hide the password credential provider from the lock screen as well as in-session authentication scenarios. For more information, see [Windows Hello for Business passwordless](../hello-for-business/passwordless.md).
**Passwordless first sign-in experience**: users can perform the first sign in to Windows passwordless, before enablig Windows Hello for Business. For example, using Microsoft Authenticator in the Web sign-in flow. When used in conjuction with passworless, the organization can hide the password credential provider from the lock screen as well as in-session authentication scenarios. For more information, see [Windows Hello for Business passwordless](../hello-for-business/passwordless.md).
:::column-end:::
:::column span="1":::
:::image type="content" source="images/lock-screen.png" lightbox="../hello-for-business/images/pinreset/pin-reset.gif" alt-text="Animation of the Web sign-in experience with Microsoft Authenticator.":::
@ -105,7 +105,7 @@ Here's a list of key scenarios that are supported by Web sign-in, and a brief an
> To simplify the sign in experience, configure the preferred tenant policy, as it automatically redirect the sign in prompt to the IdP. For more information, see
:::column-end:::
:::column span="1":::
:::image type="content" source="images/web-sign-in-federated-auth.png" lightbox="../hello-for-business/images/pinreset/web-sign-in-federated-auth.gif" alt-text="Animation of the sign in experience with a federated user.":::
:::image type="content" source="images/web-sign-in-federated-auth.png" lightbox="images/web-sign-in-federated-auth.gif" alt-text="Animation of the sign in experience with a federated user.":::
:::column-end:::
:::row-end:::