Default the Azure AD requires users to setup a PIN , to disable this after setting up the user do the following


1. Remove existing PIN

Delete the following folder: C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC\

2. Disable Windows Hello (disables PIN, Face, whatever sigin prompt and setup) CREATE NEW KEY

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork]
"Enabled"=dword:00000000