---
title: Prerequisites
slug: windows-hello-for-business/prerequisites
docTags: 
createdAt: 2026-09-29T05:52:23.224Z
---

- Device must be **Microsoft Entra Joined** (cloud-only) or **Microsoft Entra Hybrid Joined** (on-premises AD + Entra ID). Pure on-premises domain-only joined devices are not supported.
- Windows Hello for Business enrolled for the signed-in user — PIN, fingerprint, or facial recognition configured via **Settings → Accounts → Sign-in options**. Ensure the Windows version is 11 and above.
- Microsoft Entra ID (Azure AD) tenant with an account that has permission to create App Registrations and grant admin consent for the tenant.
- Latest ISAC installed on system.

:::Heading{depth="3" indent="1"}
Configuration on Microsoft Azure
:::

:::Paragraph{indent="1"}
To create a user:
:::

:::Paragraph{listStyleType="decimal" listRestartPolite="1" indent="2"}
In the [Azure Portal](https://portal.azure.com/), **Users** > **All Users**> click **Create new user**.
Enter details.
:::

![](https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/-HaPvgtcgnSE58G3hB4VB_image9.png)

:::Paragraph{listStyleType="decimal" listStart="2" listRestartPolite="2" indent="2"}
To confirm that device registration is enabled, navigate to **Azure Active Directory** > **Microsoft Entra ID **> **Manage **> **Devices **> **Manage **>**Device settings**.
In the Microsft Entra join and registration setting, click No member selected> click **Add **> select the user > click **Ok**.
:::

![](https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/wPY8ZQuAug3C8Nk5ixjO8_entra.png)