Search code examples
windowscredential-providers

Windows credential provider pinlogonprovider

I am trying to make a Windows custom credential provider using this reference https://learn.microsoft.com/en-us/samples/microsoft/windows-classic-samples/credential-provider/

https://www.microsoft.com/en-us/download/details.aspx?id=53556#:~:text=Credential%20providers%20are%20used%20in,for%20Windows%20Vista%20and%20higher

The idea is:

  1. I kept the username and password inside the pc
  2. I use my own MFA (just simple push notification to my android phone)
  3. If I confirm the notification, I will use the stored username & password to login

It works well whenever I match the password and Username, and login using my "Credential Provider"

Then I realize, after I login to my Microsoft username, The next login will be prompted PIN instead of password like this:

enter image description here

I know I can keep my Microsoft account's Password to my offline database and my idea is still working.

However, since my password is too long, I want to keep the pin instead of the password

Does Windows credential provider support PIN authentication?

I tried to google it, and it just showing the smartcard's pin instead of the Windows Logon Pin

------------------- UPDATE ------------

Looks like I did not write the question clearly

I want to extend my current Credential Provider that able to automatically sign in using password and Windows Hello PIN.

So the Database will consist of username and PIN (that match with Windows Hello PIN) or Password (that match with Local account password)

Is it possible?

Solution

  • Have a look how you set-up new logon using Picture or PIN credential providers from Microsoft Hello - initially you enter your password.
    So these providers store this collected data in some internals and later provide them as collected by themself.
    Nobody restrict you from doing the same way.

    ------------------- UPDATE ------------

    Have a look at SampleWrapExistingCredentialProvider