Enable biometrics domain-wide?

How do you enable biometric sign-in (Windows Hello for Business) for all clients of a Windows domain? I have Server 2022 domain controllers.