Passkey platform and browser compatibility
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit e93ff15 · +4 −2 lines · also on GitHub
⋯ 4 unchanged lines
55
ms.service: entra-id
66
ms.subservice: authentication
77
ms.topic: conceptual
8
−ms.date: 05/12/2025
8
+ms.date: 06/06/2025
99
1010
author: justinha
1111
ms.author: justinha
⋯ 116 unchanged lines
128128
> [!NOTE]
129129
> Passkey authentication with a third-party IdP isn't supported in third-party apps using authentication broker, or Microsoft apps on Android at this time.
130130
131
−On iOS and Mac devices that are managed by Mobile Device Management (MDM), third-party IdPs can implement their own single sign-on (SSO) extension.
131
+Microsoft Entra ID doesn't support passkey authentication with a third-party IdP on iOS/macOS.
132
+As a workaround, third-party IdPs can implement their own single sign-on (SSO) extension on iOS/macOS devices if they're managed by Mobile Device Management (MDM).
133
+
132134
Apple's extensible SSO framework on MDM-managed devices enables identity providers to intercept network requests directed to their URLs.
133135
When the SSO extension of the identity provider intercepts a network request, they can implement a custom authentication handshake.
134136
This allows them to use a system browser or native Apple APIs for passkey authentication without needing changes in Microsoft applications.
⋯ 35 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:08 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.