Passkey (FIDO2) authentication method
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 1a7f28f · +1 −1 lines · also on GitHub
⋯ 56 unchanged lines
5757
**Attestation** verifies the authenticity of the passkey provider or device during registration. When enforced:
5858
5959
- It provides cryptographically verifiable device identity through FIDO Metadata Service (MDS). When attestation is enforced, relying parties can validate the authenticator model and apply policy decisions for certified devices.
60
−- Unattestaed passkeys, including synced passkeys and unattested device-bound passkeys, don’t provide device provenance.
60
+- Unattested passkeys, including synced passkeys and unattested device-bound passkeys, don’t provide device provenance.
6161
6262
In Microsoft Entra ID:
6363
- Attestation can be enforced at the **passkey profile** level.
⋯ 21 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:46 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.