Authentication registration campaigns
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 769592d · +1 −1 lines · also on GitHub
⋯ 259 unchanged lines
260260
| --- | --- |
261261
| User 1 has an unrestricted profile, and their **only** registered passkey is Windows Hello for Business. They sign in on Windows with Chrome. | The nudge is suppressed for that platform. |
262262
| User 1 then signs in on macOS with Chrome. | The user is nudged to register a compatible passkey. Their Windows Hello for Business credential doesn’t suppress the macOS nudge. |
263
−| A user has an AAGUID-restricted profile and has registered a passkey that meets its requirements. | The nudge is suppressed across OS and browser combinations under that profile’s rule; the platform table isn’t used. |
263
+| User 2 has a device-bound profile with attestation enforced. They have registered an eligible attested passkey. | The nudge is suppressed across OS and browser combinations under that profile’s rule; the platform table isn’t used. |
264264
265265
## Enable the registration campaign policy by using Graph Explorer
266266
⋯ 304 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 13 Oct 00:24 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.