All topics and tags

FIDO2

3 articles tagged FIDO2.

  1. Break-glass accounts in Entra ID: a lockout-proof Conditional Access setup

    Create two emergency access accounts in Microsoft Entra ID, protect them with FIDO2 passkeys, exclude them safely from Conditional Access, and alert on every sign-in with Azure Monitor.

  2. Deploy passkeys in Entra ID: Authenticator, Windows Hello and FIDO2 keys

    Roll out phishing-resistant passwordless sign-in in Microsoft Entra ID with passkey profiles, passkeys in Microsoft Authenticator, FIDO2 security keys, Windows Hello for Business and authentication strengths.

  3. Require phishing-resistant MFA for admins with authentication strengths

    Use Conditional Access authentication strengths to require passkeys (FIDO2), Windows Hello for Business or certificate-based authentication for Microsoft Entra admin roles, including PIM activation.