Microsoft Entra: Enablement of Passkeys in Authenticator for passkey (FIDO2) organizations with no key restrictions
In an effort to improve security, Microsoft is enabling passkeys (FIDO2) in the Authenticator app for organizations with no key restrictions in mid-January 2025. This passkey can be added via aka.ms/MySecurityInfo and will be enforced by Conditional Access policy. Organizations can choose to not enable this feature by imposing key restrictions. However, after the general availability of passkeys in the Microsoft Authenticator app, organizations with the FIDO2 authentication methods policy enabled with no key restrictions will automatically be enabled for passkeys in the app, alongside FIDO2 security keys. This aligns with the recent availability of passkeys in Entra ID, which features device-bound passkeys on security keys and on user devices. Existing key restrictions or lack of the FIDO2 policy will not be affected. Users who have no passkey for Conditional Access authentication will be prompted to register passkeys in the Authenticator. Organization administrators do not need to take any action, but may want to inform and update users about this change.
The post Microsoft Entra: Enablement of Passkeys in Authenticator for passkey (FIDO2) organizations with no key restrictions originally appeared on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Entra: Enablement of Passkeys in Authenticator for passkey (FIDO2) organizations with no key restrictions
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Entra: Expanded support for device-bound passkeys in Microsoft Entra ID
Microsoft Entra ID, a secure authentication system, is introducing a new feature that adds support for device-bound passkeys stored on compute...
Enforce FIDO2 PIN complexity with Microsoft Entra Conditional Access Authentication Strengths.
This article titled "Enforce FIDO2 PIN complexity with Microsoft Entra Conditional Access Authentication Strengths" sheds light on securing FI...
Public Preview: Microsoft Entra ID FIDO2 provisioning APIs
Microsoft Entra ID has introduced FIDO2 provisioning APIs in public preview that make it easier to onboard users by pre-provisioning security ...
Block Device Code Authentication Requests with Conditional Access
This article outlines the procedure to block device code authentication requests on Entra ID using a preview feature for conditional access po...
Prepare for passkeys in Entra ID!
In a few months, Microsoft Entra ID will be introducing device-bound passkeys as an authentication method in preview, which will be stored on ...
Microsoft Launches Support for Entra ID External Authentication Methods
Microsoft has expanded its support for external authentication methods by including Entra ID in its portfolio. The move was announced on May 2...
Use a FIDO2 security key as Azure MFA verification method
A new feature in Azure AD may be of interest to organizations seeking to improve their Azure MFA implementations. The feature allows for the u...
Microsoft Authenticator Lite (for Outlook) Support in Legacy, Per-user MFA Policy
Microsoft has made its Authenticator Lite (for Outlook) Generally Available, enabling users to access the feature as part of the "Notification...
Manage user-preferred multi-factor authentication method in Microsoft Entra ID
If you are looking to manage the preferred multi-factor authentication method in Microsoft Entra ID, this article is for you. The post explore...
Public preview: Microsoft Entra ID FIDO2 provisioning APIs
Today I'm excited to announce a great new way to onboard employees with admin provisioning of FIDO2 security keys (passkeys) on behalf of user...