Windows Hello For Business Issue

I am deploying Passwordless authentication organization wide. Right now it works perfect. I add a user to a group they get a conditional access and a intune configuration profile that enforces windows hello at the user level. I did it this way so I did not have to add devices to a group manually.

The issue is even though its working well its ignoring some of my configurations. For example, in my configuration profile I have the pin minimum set to 4 and I have Letters/Special characters blocked. With this configuration a user will be prompted to setup windows hello when added to the group. Once they fill out this prompt that are forced to use a 6 digit pin and can use letters/numbers

I am not sure why this is happening. I confirmed nowhere in my tenant do I have any other windows hello configuration. It does not matter what device I test this on it still does not allow a pin less than 6 digits meaning its not because of a device status in Intune or it did not get the updated configuration.

I am completely stump as to why this could be happening. I am happy to answer any questions as needed. Even an article would be helpful. All I can find are end user guides.

Thanks in advance.