It is important to note that the devices must be Entra Joined to be able to use RDP with Web-AuthN

You can check this by running the following command on a CMD Terminal.

dsregcmd /status

Scroll up to see the contents of Device State. If you see AzureAdJoined : yes, your device is Entra Joined.