Forcing RapidIdentity Windows Authentication Client as only way to login

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

The RapidIdentity Authentication Client for Windows enables Users to log into their Windows device securely using their RapidIdentity credentials.

By default Windows 10/11 will always have the option on Login or Unlock to use just the password to login in addition to usign the RapidIdentity Authtenication client for Windows.

This policy setting allows the administrator to exclude the specified credential providers from use during authentication.

Note: credential providers are used to process and validate user credentials during logon or when authentication is required.

Note:To change the Windows Fast User Switching settings, you must have the ability to edit the Registry/GPO settings for the Windows machine.
  1. Configure Hide entry points for Fast User Switching
    Hide entry points for Fast User Switching: If this policy is enabled, the Switch User interface is hidden from the user attempting to log on or the lock screen for a logged-in user.
    1. Using GPO:
      In gpedit.msc navigate to Local Group Policy>Computer Configuration>Administrative Templates>System>Logon and set Hide entry points for Fast User Switching to Enabled or Disabled. Enabling this policy will disable Fast User Switching.
    2. Using Registry Editor:
      Navigate to "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" and set HideFastUserSwitching equal to dword:00000001
  2. Configure Don't display last signed-in
    Don't display last signed-in: If this policy is enabled, the last logged-in user name is hidden from the lock screen.
    1. Using GPO:
      In gpedit.msc navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options and set Interactive Logon:Don't display last signed-in to Enabled or Disabled
    2. Using Registry Editor:
      Navigate to "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"/> and set dontdisplaylastusername equal to dword:00000001