Microsoft Entra: Optimized passkey registration campaign experience

🚨 The Signal: Microsoft Entra is enhancing passkey registration campaigns, automatically prompting eligible users to register phishing-resistant passkeys. This aims to boost adoption of stronger authentication methods while respecting existing admin policies.

The Impact

All users are affected by improved passkey registration prompts, reducing phishing risk through stronger authentication.

• End users: Will see more prompts to register passkeys, improving individual security.
• Security teams: Benefit from increased adoption of phishing-resistant authentication, reducing overall attack surface.
• Admins: Existing passkey policies will be honored, but user adoption rates may increase.

The Action

1. Review existing Microsoft Entra authentication methods policies for passkey configurations: Microsoft Entra admin center > Protection > Authentication methods > Policies.
2. Communicate to end-users about the benefits of passkeys and the upcoming registration prompts.
3. Monitor passkey registration rates and user feedback after the change rolls out.

Domain: Entra · Impact: medium · Workload: Entra ID · Essential Eight: Multi-Factor Authentication · ISM: ISM-0109, ISM-0123, ISM-0140, ISM-0974, ISM-1173, ISM-1228, ISM-1401, ISM-1504, ISM-1505, ISM-1679, ISM-1680, ISM-1681, ISM-1682, ISM-1683, ISM-1815, ISM-1819, ISM-1872, ISM-1873, ISM-1874, ISM-1892, ISM-1893, ISM-1894, ISM-1906, ISM-1907