Setup password-less authentication in Windows

Windows Hello Setup (Facial Recognition and Fingerprint)

Step 1: Open Sign-in Options

1. Click the Start button and open Settings.
2. Go to Accounts > Sign-in options.
3. Under “Ways to sign in”, you have three choices to sign in with Windows Hello. Pin is mandatory and you must select at least one of the remaining two options:
4. Mandatory - Select PIN (Windows Hello) to set up sign-in with a PIN, please refer screenshot below for reference
5. Option 1 - Select Facial recognition (Windows Hello) to set up facial recognition sign-in with your PC's camera or an external camera
6. Option 2 - Select Fingerprint recognition (Windows Hello) to set up sign-in with a fingerprint reader

Step 2: Configure a PIN (Required)

1. Under PIN (Windows Hello), click Set up.
2. Follow the prompts to create a secure PIN.

Note: You must configure at least one of the steps below, or both.

Step 3: Set Up Facial Recognition

1. Under Facial recognition (Windows Hello), click Set up.
2. Click Get started.
3. Position your face in front of the camera and follow the on-screen instructions.
4. When complete, you’ll see a confirmation that your face has been recognized.

Step 4: Set Up Fingerprint Recognition

1. Under Fingerprint recognition (Windows Hello), click Set up.
2. Click Get started.
3. Place your finger on the fingerprint reader when prompted.
4. Follow the instructions to scan your fingerprint from multiple angles.
5. When complete, you’ll see a confirmation that your fingerprint has been saved.

Okta FastPass Setup

Step 1: Confirm Windows Hello Is Set Up

Make sure you’ve completed facial, and / or fingerprint setup as described above.

Step 2: Install Okta Verify

Note: You should already have Okta Verify installed on your system. If so, it will be in the system tray. If installed, please start at step 2 in this section.

1. Download and install Okta Verify from your organization’s Okta portal or from https://slu.okta.com/api/v1/artifacts/WINDOWS_OKTA_VERIFY/download?releaseChannel=GA&packageType=EXE .
2. Open Okta Verify from the system tray and sign in with your work account (Icon shown below).

Step 3: Enable FastPass

1. Open Okta verify on your system, it should be preinstalled, you will see the screen below.
2. Click on “Get started”. Read the “Hot it works” screen and click next.
3. On the screen below, in the new account field enter https://auth.slu.edu/ and click next.
4. You will be prompted to verify yourself by entering your password and possibly very with a second factor if you have previously set one up.
5. Upon your verification you will see the “Enable Windows Hello confirmation” screen below, click “Enable”.
6. After enabling, the Okta Verify application should look similar to the following screen shot.
7. If you wish to verify that FastPass is enabled for this connection, click on the “>” on the account and you can see connection.

Upon completion, you’ll be able to sign in to your computer and Okta-protected apps using Windows Hello without entering a password.

If you are still getting prompts to your phone and a password is required in Okta, select "Verify with something else" on the Okta login screen and then select "Okta FastPass".

Please also note that this authentication method is only available for the system that you have set this up on. If you wish to have another computer set up with password-less authentication, it must be set up separately.

If you face any issues or you do not see okta verify installed on your windows machine, please reach out to slu.identitymanagement@health.slu.edu for assistance.