Authentication strengths
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 9c74227 · +5 −3 lines · also on GitHub
⋯ 4 unchanged lines
55
66
ms.service: entra-id
77
ms.subservice: authentication
8
−ms.topic: conceptual
8
+ms.topic: concept-article
99
ms.date: 03/04/2025
1010
1111
ms.author: justinha
⋯ 31 unchanged lines
4343
4444
For an example, the built-in **Phishing-resistant MFA strength** allows the following combinations:
4545
46
−- Windows Hello for Business / Platform Credential
46
+- Windows Hello for Business
4747
4848
Or
4949
⋯ 14 unchanged lines
6464
|Authentication method combination |MFA strength | Passwordless MFA strength| Phishing-resistant MFA strength|
6565
|----------------------------------|-------------|-------------------------------------|-------------------------------------------|
6666
|FIDO2 security key| ✅ | ✅ | ✅ |
67
−|Windows Hello for Business / Platform Credential| ✅ | ✅ | ✅ |
67
+|Windows Hello for Business| ✅ | ✅ | ✅ |
6868
|Certificate-based authentication (Multi-Factor) | ✅ | ✅ | ✅ |
6969
|Microsoft Authenticator (Phone Sign-in)| ✅ | ✅ | |
7070
|Temporary Access Pass (One-time use AND Multi-use)| ✅ | | |
⋯ 36 unchanged lines
107107
For example, let's say a resource requires passkey (FIDO2) for the authentication strength, and a 1-hour sign-in frequency. 24 hours ago, a user signed in with passkey (FIDO2) to access the resource.
108108
109109
When the user unlocks their Windows device using Windows Hello for Business, they can access the resource again. Yesterday's sign-in satisfies the authentication strength requirement, and today's device unlock satisfies the sign-in frequency requirement.
110
+
111
+- **Authentication strength blade double representation** - Platform credentials, such as Windows Hello for Business and **Platform Credential for macOS** are both represented in authentication strength under **Windows Hello For Business**. To configure a custom authentication strength that allows the use of **Platform Credential for macOS**, use **Windows Hello For Business**.
110112
111113
## FAQ
112114
⋯ 18 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:45 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.