Moving to passwordless authentication in a hybrid environment involves more than enabling Windows Hello for Business or passkeys. In this practical session, based on lessons from a real-world project in a regulated industry, we’ll explore how to design an end-to-end Zero Trust approach to passwordless authentication in a hybrid identity environment. You’ll see how technologies such as Microsoft Entra ID, Windows Hello for Business, passkeys (FIDO2), Microsoft Authenticator, Conditional Access, PIM, SSPR, Password Protection, and Windows LAPS fit together, and where dependencies on passwords may still remain. We’ll connect the individual components into a reference architecture and examine the key design choices, dependencies, onboarding considerations, and recovery scenarios. You’ll leave with a practical blueprint and phased approach that you can adapt to your own or your customers’ hybrid environments. Key takeaways:

• Design a Zero Trust passwordless architecture for hybrid identity environments.
• Choose the right authentication method for different scenarios, including Windows Hello for Business, passkeys (FIDO2), and Microsoft Authenticator.
• Understand the role of hybrid trust models when accessing on-premises resources. - Understand how PRT and Seamless SSO fit into the authentication experience.
• Strengthen privileged access with PIM, phishing-resistant authentication.
• Plan a phased passwordless rollout, covering registration, onboarding, dependencies, recovery, and user adoption.
• Apply real-world lessons from a regulated hybrid identity implementation to your own environment or customer projects.