Microsoft Entra ID: Auto-enabling passkey profiles
Starting March 2026, Microsoft Entra ID will auto-enable passkey profiles with a new passkeyType property for device-bound and synced passkeys. Tenants not opting in will be migrated automatically, with existing settings preserved. Microsoft-managed registration campaigns will update targeting to passkeys. Preparation and configuration before rollout are recommended. Starting in March 2026, Microsoft Entra ID will introduce passkey profiles and synced passkeys to General Availability (GA). This update allows administrators to opt in to a new passkey profiles experience that supports group-based passkey configurations and introduces a new passkeyType property. The passkeyType property enables admins to configure: Device-bound passkeys Synced passkeys Both If a tenant does not opt in to passkey profiles during the initial rollout window, the new schema will be automatically enabled at the date range specified below. When this occurs: Existing Passkey (FIDO2) authentication method configurations will be moved into a Default passkey profile. The passkeyType value will be set based on the tenant’s current attestation settings. For tenants that have synced passkeys enabled, Microsoft-managed registration campaigns will update to target passkeys. When this will happen General Availability (Worldwide): Rollout begins in early March 2026 and is expected to complete by late March 2026. Automatic enablement for tenants that have not yet opted in (Worldwide): Rollout begins in early April 2026 and is expected to complete by late May 2026. General Availability (GCC, GCC High, and DoD): Rollout begins in early April 2026 and is expected to complete by late April 2026. Automatic enablement for tenants that have not yet opted in (GCC, GCC High, and DoD): Rollout begins in early June 2026 and is expected to complete by late June 2026. How this affects your organization Who is affected: All Microsoft Entra ID tenants What will happen: If you have not opted in to passkey profiles by your automatic enablement period, your tenant will be migrated to passkey profiles. Your existing Passkey (FIDO2) configurations will be migrated into a Default passkey profile New passkeyType property will be auto-populated If enforce attestation is enabled, then device-bound allowed If enforce attestation is disabled, then device-bound and synced allowed Any existing […]
The post Microsoft Entra ID: Auto-enabling passkey profiles appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Entra ID: Auto-enabling passkey profiles
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Dynamics 365 Project Operations: Optimize Project Operations – Use what-if analysis on estimates
This feature introduces a robust what-if analysis capability for estimates that enables you to model scenarios and evaluate their impact on ke...
Microsoft Dataverse: Improved enterprise experiences in Power Platform – Enhance Dataverse record descriptions for Copilot /mention
End users of Microsoft 365 Copilot will see improved Microsoft Dataverse, Dynamics 365, and Power Apps record references in Context IQ with ri...
Dynamics 365 Business Central: Country and regional – Comply with Australian Payment Times Reporting bill
Every six months, Australian companies with more than AUD100 million in annual turnover must report how and when they pay small business suppl...
Dynamics 365 Business Central: Electronic documents – Use payments with the E-Document framework
You can mark an e-document as fully paid, partially paid, or unpaid. The system sends this information through accounts payable access points ...
Dynamics 365 Sales: Copilot and AI innovation – Use Dynamics 365 Sales skills in Microsoft 365 Copilot Cowork
As an admin, you can control who can access Copilot Cowork in your organization. The Dynamics 365 Sales plugin is installed by default in Copi...
Dynamics 365 Contact Center: Unified routing – Use pick-based assignment method for work items
Use the No auto assignment method for queues in Copilot Service admin center when you want routed conversations to remain unassigned after the...
Dynamics 365 Contact Center: Omnichannel customer experiences – Handle duplicate callback requests in overflowing queues
In the in-queue and pre-queue overflow settings within the Copilot Service admin center, administrators can define the following settings: Pre...
Dynamics 365 Customer Insights – Data: Turbocharge your pipeline to drive growth – Target right audience based on signals from earlier campaigns
You can now access behavioral data captured by Customer Insights – Journeys, such as emails opened and links clicked, and use it in Cust...
Dynamics 365 Project Operations: Optimize Project Operations – Use the new Time Entry mobile app
Project team members on Lite and resource-based and nonstocked deployments of Project Operations now have a new mobile application based on Mi...
Dynamics 365 Commerce: Store Commerce – Set payment method display order and visibility in POS
The feature introduces payment profiles that can be associated with POS registers. These payment profiles provide retailers with a flexible an...