Windows Hello for windows login

[andrew123]

So, from what I can tell windows hello is STILL not supported by Duo for windows login is this correct? IF so, do we know if it ever will be, or has it been announced? We have clients refusing to purchase Duo for this reason. 

[Danoo]

ten months and no answer from Cisco?  Ten months is lots of time to at least provide an update. I really like DUO support, their  knowledge and speed is great.  But ignoring product questions seems wrong and I know it is frustrating. 

[DuoKristina]

Feel free to contact your Cisco Duo account or customer success team to discuss your feature request. That's typically how external roadmap plans get shared.

[Philip D'Ath]

I'm pretty sure you can use Windows Hello when you enable passwordless.

https://duo.com/docs/passwordless

Supported Authentication Methods

Duo Passwordless supports a diverse set of end-user authenticators and phishing-resistant passkeys for web-based application logins, including:

• Windows Hello on compatible Windows devices.
• Touch ID on compatible macOS devices.
• Face ID or Touch ID on compatible iOS and iPadOS devices.
• Android Biometrics, such as Pixel fingerprint or facial recognition, or Samsung fingerprint or facial recognition.
• WebAuthn FIDO2 security keys with biometric or PIN verification, like those from Yubico or Feitian.
• Duo Push authentication request sent to Duo Mobile on Android or iOS when the mobile device is secured with biometric, PIN, or passcode to unlock.

[DuoKristina]

That is true, @Philip D'Ath , but that only applies to SAML and OIDC/OAuth applications protected by Duo SSO, and not to logging into Windows itself with Hello as a factor for Duo Windows Logon, which is what this community post is actually about.