ZTNA and Windows Hello
You can use Windows Hello for Business to authenticate users who access apps through a Sophos ZTNA gateway.
With Windows Hello for Business, users won't need to authenticate with passwords and will have seamless access to their apps.
How Windows Hello works
Windows Hello for Business replaces passwords with strong two-factor authentication on devices. This authentication is tied to the device and uses either a PIN or biometric data.
Windows Hello for Business supports key based or certificate based authentication. This document describes key based authentication.