
The Windows Hello for Business trust type only impacts how the device authenticates to on-premises AD.

Azure AD join authentication to Active Directory using a certificate.Azure AD join authentication to Active Directory using a key.Azure AD join authentication to Active Directory using Azure AD Kerberos (cloud Kerberos trust).Azure AD join authentication to Azure Active Directory.


Hybrid Azure Active Directory-joined devices authenticate to Active Directory during sign-in, and authenticate to Azure Active Directory in the background. Authenticating with Windows Hello for Business provides a convenient sign-in experience that authenticates the user to both Azure Active Directory and Active Directory resources.Īzure Active Directory-joined devices authenticate to Azure during sign-in and can optionally authenticate to Active Directory. Windows Hello for Business authentication is passwordless, two-factor authentication.
