**Web sign-in** is a modern way of signing into a [[Windows]] PC. It enables Windows sign-in support for new [[Entra ID|Azure AD]] credentials, like [[Temporary Access Pass (TAP)]].
>[!Note]
>Web sign-in is only supported on [[Entra Join|AzureAD Joined]] PCs.
1. Open the [Microsoft Endpoint Manager admin center](https://devicemanagement.microsoft.com/) portal and navigate to **Devices** > **Windows** > **Configuration profiles**
2. On the **Windows | Configuration profiles** blade, click **Create profile**
3. On the **Create a profile** blade, provide the following information and click **Create**
- **Platform**: Select **Windows 10 and later** to create a profile for Windows 10 devices
- **Profile**: Select **Settings catalog** to select the required setting from the catalog
1. On the **Basics** page, provide the following information and click **Next**
- **Name**: Provide a name for the profile to distinguish it from other similar profiles
- **Description**: (Optional) Provide a description for the profile to further differentiate profiles
- **Platform**: (Greyed out) Windows 10 and later
2. On the **Configuration settings** page, as shown below in Figure 1, perform the following actions
- Click **Add settings** and perform the following in **Settings picker**
- Select **Authentication** as category
- Select **Enable Web Sign In** as setting
- Select **Enabled. Web Sign-in will be enabled for signing in to Windows** with **Enable Web Sign In** and click **Next
6. On the **Scope tags** page, configure the required scope tags and click **Next**
7. On the **Assignments** page, configure the assignment and click **Next**
8. On the **Review + create** page, verify the configuration and click **Create**
# Source
[Enable web sign-in policy from Intune – Beyond Identity](https://support.beyondidentity.com/hc/en-us/articles/9898790169879-Enable-web-sign-in-policy-from-Intune)
[Enabling web sign-in to Windows for usage with Temporary Access Pass – All about Microsoft Intune (petervanderwoude.nl)](https://www.petervanderwoude.nl/post/enabling-web-sign-in-to-windows-for-usage-with-temporary-access-pass/)
[Authentication Policy CSP - Windows Client Management | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-authentication#enablewebsignin)