Badge ID + PIN. Admins use the same login here — badge ID first, then PIN. Shop-floor kiosks don't need this — they're enrolled once.
Do this once on each shop-floor tablet, wall TV, or dock terminal. Badge scans then work without anyone signing in. Your own sign-in is removed from this device when you enroll it.