Post #2595475
2026-05-10 20:32 UTC
@rmondello@hachyderm.io while I agree, in the microsoft world entra wont let you setup a passkey unless you have either Ms authenticator push or totp setup first. I have no idea why.
Replies (1)
-
@joneskoo@infosec.exchange 2026-05-11 03:33
@jsmall@infosec.exchange @rmondello@hachyderm.io Probably to avoid users locked after setting up solo Yubikey or signing in where they can’t use it. The TOTP is not used there with Passkey but Password+TOTP as alternate to Passkey. That said, if Microsoft Authenticator on one device is good, why not Passkey? Maybe it has fallback like SMS?