FIDO2 Windows login on hybrid joined devices not working when no on-prem AD in sight

[Windows 11]

We have hybridjoined computers and try to implement FIDO2 login for Windows logins. We have followed the instructions and it all worked fine. But we now start to have some devices (not users) that can't use the FIDO2 login when they don't have the On-prem AD in sight. It seems like these devices don't store the informationen needed in order to enable an offline login via FIDO2. Is there a way to influence that behavior?

Continue reading...