Blog Post

Microsoft Entra Blog
4 MIN READ

Expansion of FIDO standard and new updates for Microsoft passwordless solutions

Alex_Simons's avatar
Alex_Simons
Icon for Microsoft rankMicrosoft
May 05, 2022
Howdy folks,    Happy World Password Day! Today, I’m super excited to share some great news with you: Together, with the FIDO Alliance and other major platforms, Microsoft has announced support f...
Updated May 19, 2022
Version 3.0
identity and access management
Alex_Simons's avatar
Icon for Microsoft rankMicrosoft
Joined May 01, 2017
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
JayBeeFinalBeta's avatar
JayBeeFinalBeta
Copper Contributor
May 31, 2022

I've been testing with this. 

I love what exists at the moment. 

 

Some feedback/notes for others: 

* I notice when going passwordless, the Microsoft Authenticator takes a bit longer to present to prompt compared to when just having to display the allow/deny popup. 

* Microsoft Authenticator doesn't allow Windows device sign in, FIDO doesn't do the mobile part. So it's definitely only in the testing phase. Not something I can roll out to all users. 

* Removing of passwords is only possible on "Microsoft Accounts". Not "Azure AD accounts". So at the moment, this actually doesn't help against phishing in a big way. Users still need have a password, and so they will still be phished. 

*  No elevate support in Windows ( runas /user...)

 

 

But this is definitely the way to go. Can't wait for new developments in this area.