From 655f8185b9a42e86e7330a78adf48f6276b46543 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 12 Sep 2023 13:29:14 -0400 Subject: [PATCH] web sign-in --- includes/licensing/web-sign-in.md | 22 +++++++++++++++++++ .../web-sign-in-credential-provider.svg | 6 ++--- .../identity-protection/web-sign-in/index.md | 21 +++++++++--------- 3 files changed, 35 insertions(+), 14 deletions(-) create mode 100644 includes/licensing/web-sign-in.md diff --git a/includes/licensing/web-sign-in.md b/includes/licensing/web-sign-in.md new file mode 100644 index 0000000000..236ed95d1f --- /dev/null +++ b/includes/licensing/web-sign-in.md @@ -0,0 +1,22 @@ +--- +author: paolomatarazzo +ms.author: paoloma +ms.date: 08/02/2023 +ms.topic: include +--- + +## Windows edition and licensing requirements + +The following table lists the Windows editions that support Web sign-in: + +|Windows Pro|Windows Enterprise|Windows Pro Education/SE|Windows Education| +|:---:|:---:|:---:|:---:| +|Yes|Yes|Yes|Yes| + +Web sign-in license entitlements are granted by the following licenses: + +|Windows Pro/Pro Education/SE|Windows Enterprise E3|Windows Enterprise E5|Windows Education A3|Windows Education A5| +|:---:|:---:|:---:|:---:|:---:| +|Yes|Yes|Yes|Yes|Yes| + +For more information about Windows licensing, see [Windows licensing overview](/windows/whats-new/windows-licensing). diff --git a/windows/security/identity-protection/web-sign-in/images/web-sign-in-credential-provider.svg b/windows/security/identity-protection/web-sign-in/images/web-sign-in-credential-provider.svg index c43796b920..1afb38e115 100644 --- a/windows/security/identity-protection/web-sign-in/images/web-sign-in-credential-provider.svg +++ b/windows/security/identity-protection/web-sign-in/images/web-sign-in-credential-provider.svg @@ -1,4 +1,4 @@ - - - + + + diff --git a/windows/security/identity-protection/web-sign-in/index.md b/windows/security/identity-protection/web-sign-in/index.md index 526f918bf6..5ee194151d 100644 --- a/windows/security/identity-protection/web-sign-in/index.md +++ b/windows/security/identity-protection/web-sign-in/index.md @@ -11,22 +11,21 @@ ms.collection: # Web sign-in for Windows devices -Starting in Windows 11, version 22H2 with [KB5030310][KB-1], you can enable your users to sign-in using a web experience on Microsoft Entra joined devices. -This feature is called *Web sign-in*.\ +Starting in Windows 11, version 22H2 with [KB5030310][KB-1], you can enable your users to sign-in using a web experience on Microsoft Entra joined devices, unlocking new sign-in options and capabilities. +This feature is called *Web sign-in*. -Web sign-in is a *credential provider* on the Windows lock screen that enables users to sign in using a web interface, unlocking new sign-in options and capabilities. Initially introduced in Windows 10, it supported only Temporary Access Pass (TAP). With the release of Windows 11, the supported scenarios and capabilities of Web sign-in have been expanded. - -## Benefits of web sign-in +Web sign-in is a *credential provider*, and it was initially introduced in Windows 10 with support for Temporary Access Pass (TAP) only. With the release of Windows 11, the supported scenarios and capabilities of Web sign-in have been expanded.\ +For example, with Web sign-in organizations can move to passwordless sign-in experiences, or enable users to sign-in with a federated identity. ## Prerequisites -To use web sign-in, the following prerequisites must be met: +To use web sign-in, the clients must meet the following prerequisites: -- The devices must have Internet access. This feature doesn't work without it, as the authentication is done over the Internet. -- The device must be Microsoft Entra joined -- Windows 11, version 22H2 with [5030310][KB-1] +- Windows 11, version 22H2 with [5030310][KB-1], or later +- Must be Microsoft Entra joined +- Must have Internet connectivity, as the authentication is done over the Internet - +[!INCLUDE [federated-sign-in](../../../../includes/licensing/web-sign-in.md)] ## Configure web sign-in @@ -72,7 +71,7 @@ Once the devices are configured, a new sign-in experience becomes available, as :::image type="content" source="images/lock-screen.png" lightbox="images/lock-screen.png" alt-text="Screenshot of the Windows lock screen showing the Web sign-in credential provider."::: -Here's a list of key scenarios that are supported by Web sign-in: +Here's a list of key scenarios that are supported by Web sign-in, and a brief animation showing the user experience. Select the thumbnail to expand the animation. :::row::: :::column span="3":::