Microsoft Entra ID: Passkey support for B2B users

🚨 The Signal: Microsoft Entra ID now supports passkeys for B2B guest users, enabling them to use resource tenant-issued passkeys for MFA. This enhances security for external collaborations by strengthening authentication methods.

The Impact

External and internal guest users are affected, with a positive security risk reduction due to stronger authentication.

• External B2B users: Reduced risk from phishing due to passkey MFA.
• Internal guest users: Enhanced security posture for cross-tenant access.
• Resource tenant admins: Improved compliance with MFA requirements for guests.
• Security teams: Stronger authentication for federated identities.

The Action

1. Review Entra ID Authentication methods policy for passkey enablement scope.
2. Assess Conditional Access policies to ensure passkey usage aligns with access requirements for B2B users.
3. Communicate passkey availability and registration process to B2B users.
4. Monitor passkey registration and usage for B2B accounts.

Domain: Entra · Impact: medium · Workload: Entra ID · Essential Eight: Multi-Factor Authentication · ISM: ISM-0109, ISM-0123, ISM-0140, ISM-0974, ISM-1173, ISM-1228, ISM-1401, ISM-1504, ISM-1505, ISM-1679, ISM-1680, ISM-1681, ISM-1682, ISM-1683, ISM-1815, ISM-1819, ISM-1872, ISM-1873, ISM-1874, ISM-1892, ISM-1893, ISM-1894, ISM-1906, ISM-1907