You can use the enrolled authenticators to log in to the Windows operating system. You must pass through the authenticators in the chain to get authenticated.
To log in to Windows with Advanced Authentication, perform the following steps:
Specify the user name in the Other user screen.
NOTE:To log in to the local account, enter <computer name>\<Username of local account> or.\<Username of local account>.
Press Enter or click Next.
Select an authentication chain from the list.
Authenticate with the required authentication method(s) of the chain.
A prompt to select category might appear, if you have enrolled an authenticator for more than one category.
(Conditional) If the administrator has configured Windows Hello for Business, you are required to specify Windows Hello PIN on the Windows 10 workstation as an additional factor after authenticating with the Advanced Authentication chain.
For more information on how to setup Windows Hello PIN, see Windows 10 Sign-in options.
NOTE:If you log in to a non-domain joined workstation for the first time, you are prompted to provide credentials of your local account to map the domain account to the local account. Specify <computer name>\<Username of local account> or.\<Username of local account> in user name then specify the password of your local account and click Next.
Advanced Authentication provides the following authenticators for logging in to Windows: