Microsoft Authenticator Passkeys for Entra ID on unmanaged devices
Hello, has anyone successfully registered passkeys on an unmanaged phone in an organisation with device compliance policies? Use case is to provide a phishing-resistant MFA option via Authenticator app for logging into apps on their desktop. Users already have authenticator app on their phone and do number matching MFA. https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-register-passkey-authenticator?tabs=iOS When I select "Create a passkey" - I need to log into my account. However I'm blocked from successful authentication because I have conditional access policies to require compliant devices. As my mobile phone is not enrolled into Intune, I never get to the step where the passkey is created and registered. Based on the constraints - it seems like passkeys cannot be used for unmanaged/BYOD devices for organisations that have device compliance policies. It can only be used for users who have enrolled their mobile phone. Looking to see if anyone has tips or different experience using passkeys on unmanaged mobile phones to log into Entra?
failed set-up of a passkey for a personal MS account
After scanning the QR code (on the PC screen) in the Authenticator app on the Iphone, the error message “Error adding the passkey - Microsoft Authenticator does not support this passkey” (translated from German) appears. What does this mean ? How to prevent? Any help is appreciated.How to add Passkey for Entra ID / M365 Identity to Windows Hello or third-party password manager?
I manage many M365 tenants and can't add all of them to Windows as an account. Because of this I would like to add passkeys for those accounts to either a third-party password manager or (preferred) Windows Hello. So far I haven't found a way to do this. The passkey dialog at https://mysignins.microsoft.com/security-info only allows me to add a passkey to a physical key. So: So how can I add M365 passkeys to Windows Hello?Support tickets unresolved after 11 months; escalation requests ignored; stuck in a feedback loop
Hello, We have been unable to update O365 applications for close to a year now. When we update the applications, our end-users are unable to authenticate and receive 1001 errors. We have had a support ticket open now for 11 months. We are stuck in a loop where support asks us to demonstrate the issue. I can consistently reproduce this issue. This is a cry for help. Thanks to anyone who has any suggestions.
User getting refresh token expired due to inactivity in Outlook desktop AADSTS70008
I have a user who continues to receive this AADSTS70008 error in Outlook Desktop. This computer has been in service for several years and Outlook desktop has been running fine. User can successfully authenticate in MS Teams and Outlook on the Web. MFA is enabled. I have attempted a restart but Outlook produces the same error. I have seen older posts suggesting that the registry key for the office activation be removed to fix this issue. Any thoughts on a more straightforward fix than registry hacks? DSTS70008
'Identity Pass' Unable to request new 'TAP code' returns Error Code: 203 Information does not match
Issue: BLOCKED: Disaster Recovery Fails: Unable to request new 'TAP code' from 'Identity Pass' app. Resetting Authenticator App on replacement Corp Laptop & Android Repo steps: - Received new MSFT imaged Laptop & Android phone - On Android, go to aka.ms/knockknock - 'Identity Pass' launches successfully and requests Employee ID & Corp email - Enter Employee ID '000477476' & Corp Alias 'email address removed for privacy reasons' - Click 'Submit' - Returns Error Code: 203 'Information does not match'. - Retry with Birthdate 9/22/1977 & Corp Alias 'email address removed for privacy reasons' - Click 'Submit' - Returns Error Code: 203 'Information does not match'. - BLOCKED: Resubmitting a new 'TAP code' request Fails with Error Code: 203 'Information does not match'. As the result, we can no longer sign-in to https://client.wvd.microsoft.com/arm/webclient/index.html to configure our Authenticator Apps. Please let us know if there's anything else we can do or provide the help get this issue resolved ASAP. Thanks & Best Regards, GaryThe ability to add photos / images to Microsoft Authenticator accounts
Hi, First post in this forum (hello to all !). Can we have the ability to add photos / images to each account listed on our Microsoft Authenticator accounts ? This would allow me to quickly identify which account code I need on the long list of accounts I have connected to my Authenticator app. Many thanks Jay
Make software oath mandatory in addition to other MFA methods
Hi, We're seeing quite a few issues with users who bought a new phone, and subsequently are locked out of their account due to MS Authenticator not properly porting their information to their new device. I've been trying to promote using software oath (in our case configure MFA using 1Password) to prevent such lockouts and reduce the number of support tickets , but with limited success so far. Is there a way to not just make MFA in general mandatory, but also specify that software 2FA app needs to be one of them (in addition to e.g. MS Authenticator)? Thank you!
