The proposed solution is incorrect. The settings for Windows Hello for Business, including PIN length requirements, are not configured in the User or Device settings within the Microsoft Entra admin center. These settings are managed through device configuration policies. For cloud-managed devices, this is done by creating an Identity Protection configuration profile in the Microsoft Intune admin center. The Entra ID Device settings control high-level device registration and join permissions, not specific device security features like PIN complexity.

1. Microsoft Learn | Manage Windows Hello for Business on devices with Microsoft Intune:

This document details the procedure for configuring Windows Hello for Business. It

specifies that an administrator must go to the Microsoft Intune admin center and create a

configuration profile using the "Identity protection" template, which contains the "Minimum

PIN length" setting.

URL: https://learn.microsoft.com/en-us/mem/intune/protect/windows-hello

2. Microsoft Learn | Configure device settings in Microsoft Entra ID: This source outlines the

available options within the "Device settings" page in Microsoft Entra ID. The settings listed

include "Users may join devices to Microsoft Entra ID" and "Require multifactor

authentication to register or join devices," confirming that PIN configuration is not managed

here.

URL: https://learn.microsoft.com/en-us/entra/identity/devices/manage-deviceidentities#configure-device-settings