Enable windows hello
if Windows Hello is disabled on a work pc
- enable pin source
restart PC
add pin
asks to log in okta & microsoft
https://mysignins.microsoft.com/security-info
unable to add to microsoft authenticator
but was able to add my phone