Scott Wilson 🌈
@scottwilson@infosec.exchange
29+ year information security “professional”. Middle-aged, middle class husband, dad, and doggy-dad. Stage IIIB #ColorectalCancer survivor. I like non-alcoholic #beer, #gardening and #yardwork, playing #guitar, listening to #music, and reading #books (#mystery, #thriller, #suspense, #scifi, #astrophysics, and #cosmology). I’m supporter of #LGBTQIA rights, a #BlackLivesMatter advocate, a believer in #TransRights and proponent of equity and equality. I support #Ukraine. I DO NOT support ICE. 0% of my profile and posts are AI-generated. Posts are on auto-delete (1 week).
infosec.exchange
Friends, I need some help and advice.
Microsoft recently announced retirement of Microsoft-provided SMS and voice authentication in Entra ID.
Of course, "good", you say -- me, too. But I'm working with an organization that has some extremely non-techie employees, and I've got to figure out the easiest path to help them get properly on-boarded with Passkeys.
Microsoft Authenticator seems to support Passkeys natively (the key is stored IN MS Authenticator). Is this the best way to do this? My non-techie users are primarily mobile phone users on Exchange Plan 1 (no "fat" client).
Help!
#passkeys #webauthn #fido #microsoft #mfa #lazyweb #help
References:
https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/
https://mc.merill.net/message/MC1426371
