Entra Hybrid Join for Windows

About

A Microsoft Entra feature for UNW-owned Windows devices known as Hybrid Join enables the integration and trust of the device itself to the authentication infrastructure in the cloud. 

How does Hybrid Join help me sign in?

In practice, this allows the UNW account login to be automatically used to sign in other desktop Microsoft applications and even UNW applications in the web browser. Additionally, these trusted UNW computers can serve as a factor of authentication (something you have), thus replacing the need for additional multifactor authentication (MFA) on those devices in many cases. Connection to the GlobalProtect VPN still requires MFA for example.

Which browser should I use?

For the best experience, UNW IT recommends the Microsoft Edge browser for a more seamless logon experience.

If you prefer to use Firefox or Google Chrome, additional steps are required to take advantage of these integrations.

Firefox

Follow the steps in this article to enable the proper setting: https://support.mozilla.org/en-US/kb/windows-sso

Google Chrome

Install the Windows Accounts browser extension found here: https://chrome.google.com/webstore/detail/windows-accounts/ppnbnpeolgkicgegkbkbjmhlideopiji/related?hl=en-US


What will change on my computer?

Windows Profile Photo

You will notice that the profile picture on your workstation logon screen will be updated to a default badge photo or the image you have used on other Microsoft applications like Teams. 

Default profile icon
New default profile icon

 

Windows Hello Sign-in

If you had previously enabled Windows Hello sign-in methods, such as Fingerprint or PIN, you will be required to sign-in with your username and password to set these methods up again following the change.

Following the change, Windows Hello will become Windows Hello for Business and you may be asked to setup additional authentication information in case you need to reset your PIN. You are not required to download or setup the Microsoft Authenticator app at this time. Scanning the code with the Duo Mobile app is also supported.