Multifactor Authentication (MFA) Using Passkeys

An Entra ID passkey is a more secure way to sign in to your work or school Microsoft account without using a password. Instead of typing a password, you verify your identity using your device's built-in security, such as Face ID, Touch ID, Google Password Manager, or your device PIN. Because your passkey is stored securely on your device and never shared with Microsoft or websites, it is much harder for attackers to steal or misuse than a traditional password, text, or voice call.  

Device-bound 

• Stored on a single device like a FIDO2 security key or Microsoft Authenticator. 

Synced  

• Stored in a cloud provider like iCloud Keychain or Google Password Manager and available across devices. 
  
  Note: If you are utilizing cross - bound devices (synced) please make sure that both devices have bluetooth turned on.
  

Sign-in flow 

• User selects a passkey (same device, cross-device, or security key). 

• Microsoft Entra ID sends a cryptographic challenge. 

• The authenticator unlocks the private key via biometric/PIN. 

• Once verified, user is successfully signed in. 
  
  
  

Scenario 2: Passkeys Using IOS Password Manager 

Steps 

1. On your mobile device, open your web browser and go to https://myaccount.microsoft.com 
   
   
2. Log in with your UWM credentials 
   

    3. Under “My Account”, select “Security Info”  
      
       


   4.  Select “Add sign-in method” followed by “Passkey”. 
       
       

    5.  Select “Next”. 

    6.  A pop-up will appear on your phone asking where you want to save the passkey. Select "Save in Passwords", then tap "Add Passkey."

     6. When prompted, enter a name for your passkey that will help you identify it later.  

     

      7. If the passkey is successfully created, the following confirmation screen will appear