Entra passkeys on Windows
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit a8ea37a · +6 −0 lines · also on GitHub
⋯ 91 unchanged lines
9292
9393
In the Authentication methods policy in the Microsoft Entra admin center, ensure that **Enforce attestation** is set to **No** for any passkey profile that includes Windows Hello AAGUIDs during public preview.
9494
95
+## Known issues
96
+
97
+During public preview, if a tenant allows Microsoft Entra passkeys on Windows and a user registers a passkey, it appears in the user's list of usable authentication methods. If the tenant later removes the Windows Hello AAGUIDs from the allow list, the registered passkey remains on the usable authentication methods list instead of moving to the non-usable methods list. This issue will be fixed for General Availability.
98
+
99
+:::image type="content" source="media/how-to-authentication-entra-passkeys-on-windows/epow-known-issue-usable-auth-method.png" alt-text="Screenshot that shows a registered passkey still listed as a usable authentication method after the tenant removes it from the allow list.":::
100
+
95101
## How to configure passkeys on Windows
96102
97103
During public preview, Microsoft Entra passkeys on Windows require an Authentication Policy Administrator to explicitly opt in.
⋯ 33 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 21:50 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.