Blog Post

Microsoft Entra Blog
4 MIN READ

Expansion of FIDO standard and new updates for Microsoft passwordless solutions

Alex_Simons's avatar
Alex_Simons
Icon for Microsoft rankMicrosoft
May 05, 2022
Howdy folks,    Happy World Password Day! Today, I’m super excited to share some great news with you: Together, with the FIDO Alliance and other major platforms, Microsoft has announced support f...
Updated May 19, 2022
Version 3.0
identity and access management
JayBeeFinalBeta's avatar
JayBeeFinalBeta
Copper Contributor
May 31, 2022

I've been testing with this. 

I love what exists at the moment. 

 

Some feedback/notes for others: 

* I notice when going passwordless, the Microsoft Authenticator takes a bit longer to present to prompt compared to when just having to display the allow/deny popup. 

* Microsoft Authenticator doesn't allow Windows device sign in, FIDO doesn't do the mobile part. So it's definitely only in the testing phase. Not something I can roll out to all users. 

* Removing of passwords is only possible on "Microsoft Accounts". Not "Azure AD accounts". So at the moment, this actually doesn't help against phishing in a big way. Users still need have a password, and so they will still be phished. 

*  No elevate support in Windows ( runas /user...)

 

 

But this is definitely the way to go. Can't wait for new developments in this area.