Passkeys in Microsoft Authenticator
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 923e508 · +13 −5 lines · also on GitHub
⋯ 20 unchanged lines
2121
- [Microsoft Entra multifactor authentication (MFA)](howto-mfa-getstarted.md).
2222
- Android 14 and later or iOS 17 and later.
2323
- For cross-device registration and authentication:
24
− - Both devices must have Bluetooth enabled.
25
− - Internet connectivity to these two endpoints must be allowed in your organization:
26
− - `https://cable.ua5v.com`
27
− - `https://cable.auth.com`
24
+ - Make sure that Bluetooth and an active internet connection are enabled on both devices.
25
+ If your organization restricts Bluetooth usage, you can [permit Bluetooth pairing exclusively with passkey-enabled FIDO2 authenticators](/windows/security/identity-protection/passkeys/?tabs=windows%2Cintune#passkeys-in-bluetooth-restricted-environments) to allow cross-device passkey sign-in and registration.
26
+ Allow connectivity to these endpoints in your organization to enable cross-device registration and authentication.
27
+ Devices must be allowed to reach these URLs without interception.
28
+ They need to be excluded from network proxies, interception, and other enterprise systems.
2829
30
+ Platform | URL
31
+ ---------|----
32
+ Android | `https://cable.ua5v.com`
33
+ iOS | `https://cable.auth.com`
34
+ iOS | `app-site-association.cdn-apple.com`
35
+ iOS | `app-site-association.networking.apple`
36
+
2937
> [!NOTE]
30
− > Users can't use cross-device registration if you enable attestation.
38
+ > Users can't use cross-device registration or authentication if you enable attestation.
3139
3240
To learn more about FIDO2 support, see [Support for FIDO2 authentication with Microsoft Entra ID](fido2-compatibility.md).
3341
⋯ 120 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:30 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.