We currently use Microsoft's default passkey configuration, allowing both passkey types without attestation. I'm considering whether to create different authentication strengths for various user groups. For highly privileged…
We currently use Microsoft's default passkey configuration, supporting both synced and device-bound passkeys without attestation. I'm trying to work out whether we should create different authentication strengths and…
Several tools in our environment are making passkeys the default or mandatory alternative to passwords and traditional MFA. The sign-in flow asks for an email address and then…
We're finally rolling out MFA for Microsoft 365 and a few vendor accounts. We plan to use YubiKeys for FIDO2 and older MFA methods such as TOTP, mainly…
I manage a small Microsoft 365 tenant with about 80 users, Business Premium, and Entra ID P1. After replacing Security Defaults with Conditional Access, I created two unlicensed…
We have a small Microsoft 365 tenant of about 80 users on Business Premium with Entra ID P1. After replacing Security Defaults with Conditional Access, I created two…
We're preparing Windows Hello for Business for hybrid-joined devices using Cloud Kerberos Trust. Our concern is that someone could observe or obtain another employee's PIN and use it…
I manage a Microsoft 365 tenant and am preparing to roll out passkeys. Our Windows 11 Pro PCs are Microsoft Entra joined and users already sign in with…
I'm moving a Microsoft 365 tenant to passkeys and want to understand how this will work on Windows 11 Pro devices that are Microsoft Entra joined and already…
I want to enforce hardware-based login on a few Windows office computers used by executives and other higher-privilege employees. Ideally, a user would tap an NFC-capable YubiKey on…
I'm trying to understand how MFA protects against a phishing scenario where an attacker sends a malicious link leading to a fake Microsoft 365 login page. The victim…
We're transitioning to a completely passwordless setup using FIDO2, which sounds promising, but I have concerns about what happens if a user loses their passkey. For example, if…
We're exploring options for implementing a phishing-resistant multi-factor authentication (MFA) solution for our sensitive systems. Currently, we use standard MFA, but we want to enhance security by reducing…
I'm looking for advice on provisioning FIDO2 keys on behalf of our users. Most recommend allowing users to enroll themselves, but that's not feasible for us due to…
I'm looking to implement SCRIL while using FIDO2 security keys for user authentication. Users have already registered their FIDO2 keys with Windows Hello for Business (WHFB) and set…
I'm looking for recommendations on USB FIDO2 tokens suitable for use with Microsoft 365. We have users who are hesitant to use Authenticator apps, and I'd like to…
I'm looking into FIDO2 USB tokens for Office 365, especially for users who aren't comfortable with Authenticator apps. The more affordable options seem to allow weak PINs like…
Hey everyone, I'm running into an issue with the MFA (Multi-Factor Authentication) rollout for Microsoft 365 and I'm hoping someone here can help. We bought a few FIDO2…
We've got a new executive who wants to roll out FIDO2 keys for everyone in our organization, and he's pretty keen on integrating them with our access control…
I'm working at a small company with fewer than 15 employees, utilizing Microsoft 365 Business Premium, Intune, and Apple Business Manager. We're committed to keeping our security measures…