himmelblau-idm / himmelblau

Azure Entra ID Authentication, with PAM and NSS modules.
GNU General Public License v3.0
28 stars 5 forks source link

Windows Hello PIN implementation #101

Closed dmulder closed 4 months ago

dmulder commented 5 months ago

This causes Himmelblau to enroll the authenticating user in Windows Hello for Pin authentication. It uses the msal rust library to associate the user chosen Pin with a rsa key, which is then enrolled in Windows Hello. This eliminates the problem with MFA prompts at the lock screen (which didn't work). The user now treats the Pin code as a local password.

Fixes #

Checklist