Public preview of Azure AD support for FIDO2 security keys in hybrid environments

Do user account still requires a password?

Can we deploy the setting without Intune and using GPO only?

What are the minimum subscription that we need? Free Azure AD is supported?

What sign-in method on Azure AD is support and not supported? ADFS, Password Hash Synchronization or Pass-through Authentication.

Is there impact when user change their password?

What is the difference using password login and FIDO login? Does user still obtain an Kerberos ticket?

How to determine the domain controller support FIDO login? Is there any PowerShell to query the number of server that supported FIDO login?

Can you explain the login flow using FIDO, client authenticate with Azure AD and pass the token to Win2016 server?

What event log to look for on Windows server to determine a computer or user login via FIDO?

Can client login FIDO while its temporary offline using cache?

A FIDO U2F device relies on public/private key, do they expires and need to renew?