Microsoft Entra ID: Passkey support for B2B users

Microsoft Entra ID will support passkey registration and sign-in for B2B users to meet resource tenant MFA requirements, enhancing phishing resistance. This feature, enabled by default, rolls out from October 2026 to February 2027, requiring no admin action but recommending policy reviews to align user scopes and MFA settings. Microsoft Entra ID will support passkey registration and sign-in for B2B users, including internal guest users and external users. Eligible B2B users will be able to register and use passkeys issued by the resource tenant to satisfy that tenant’s multifactor authentication (MFA) requirements. Passkeys are already supported for member users in their home tenant. Until now, B2B users could not use a resource tenant passkey when that tenant required MFA and did not trust the home tenant’s MFA. This update closes that gap and gives guest and external users a phishing-resistant way to satisfy MFA requirements in the resource tenant. B2B users can register a resource tenant passkey from the resource tenant’s My Security Info page, during a proof-up prompt, or through a passkey registration campaign. Once registered, the passkey can satisfy the resource tenant’s MFA requirements during sign-in. Microsoft Authenticator app passkeys will be supported for internal guest users but not for external users. Rollout schedule General Availability (GCC, Worldwide): Beginning in early October 2026 and expected to complete by late February 2027 Internal guest users: Beginning in early October 2026 and is expected to complete by late October 2026 External users (excluding Microsoft Authenticator app passkeys): Rollout timing will be communicated in a future Message center post update. Impact on your organization Who is affected Microsoft Entra administrators managing Authentication methods policies Organizations that use Microsoft Entra B2B collaboration Internal guest users and external users who are in scope for passkey authentication Platforms and services Microsoft Entra ID My Security Info Authentication methods policy Conditional Access What will happen The feature will be enabled by default. B2B users who are already in scope for passkeys in your Authentication methods policy will automatically be able to register and sign in with resource tenant passkeys. No administrative action is required to […]

The post Microsoft Entra ID: Passkey support for B2B users appeared first on M365 Admin.