Microsoft Entra ID: Authentication strength improvements to support passkeys
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Rollout
- Roadmap
- 182056
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
Schedule dates changed in the text
Date phrases in schedule sentences differ between the versions we saw- Seen 17 May 2024
early March 2024, mid-March 2024, late April 2024, early May 2024→ mid-May 2024, early June 2024, mid-July 2024, early August 2024
Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.
What the notice says
Microsoft’s text, safely structuredUpdated May 17, 2024: We have updated the rollout timeline below. Thank you for your patience.
Conditional Access authentication strengths in Microsoft Entra ID will be improved to support registration of device-bound passkeys (defined at passkeys.dev) stored on computers, security keys, and mobile devices.
This message is associated with Microsoft 365 Roadmap ID 182056.
When this will happen
Public Preview: We will begin rolling out mid-May 2024 (previously early March) and expect to complete by early June 2024 (previously mid-March).
Worldwide, GCC, GCC High, DoD: We will begin rolling out mid-July 2024 (previously late April) and expect to complete by early August 2024 (previously May).
How this will affect your organization
End user registration
Prior to this change, users who were in-scope for authentication strength enforcement who could not satisfy passkey (FIDO2) authentication requirements received an error message asking users to manually register the passkey (FIDO2) method.
With this rollout, in My Security Info, new registration options called Passkey (preview) and Passkey in Microsoft Authenticator (preview) will be shown to users who are interrupted to register a passkey (FIDO2) method to satisfy authentication strength requirements. Users that are required to register a passkey in Microsoft Authenticator will see a dedicated registration experience. Users whose organization requires specific passkeys from various vendors and manufacturers will be shown allowable AAGUIDS of the passkeys they can choose to register. No changes are expected to existing Conditional Access policies targeting security information registration.
What you need to do to prepare
For more information on changes to Microsoft Entra support for passkeys (FIDO2), please review our previous message center post MC690185: (Updated) Prepare for device-bound passkeys in Microsoft Entra ID (changes to FIDO2 and Windows Hello for Business), (November 2023).
No action is needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.
What changed
Between archive captures, newest first- Tags
Feature update, User impact, Admin impact→ Updated message, Feature update, User impact, Admin impact
Updated May 17, 2024: We have updated the rollout timeline below. Thank you for your patience. Conditional Access authentication strengths in Microsoft Entra ID will be improved to … mobile devices. This message is associated with Microsoft 365 Roadmap ID 182056.
[WhenWhen this willhappen:]happen: Public Preview: We will begin rolling out mid-May 2024 (previously earlyMarch 2024March) and expect to complete bymid-March 2024.early June 2024 (previously mid-March). Worldwide, GCC, GCC High, DoD: We will begin rolling out mid-July 2024 (previously lateApril 2024April) and expect to complete by earlyMay 2024. [HowAugust 2024 (previously May). How this will affect yourorganization:]organization: End user registration Prior to this change, users who were in-scope for … expected to existing Conditional Access policies targeting security information registration. Current: New:[WhatWhat you need to do toprepare:]prepare: For more information on changes to Microsoft Entra support for passkeys (FIDO2), …- Tags
… mobile devices. This message is associated with Microsoft 365 Roadmap ID 182056.
When[When this willhappen:happen:] Public Preview: We will begin rolling out early March 2024 and expect … out late April 2024 and expect to complete by early May 2024.How[How this will affect yourorganization:organization:] End user registration Prior to this change, users who were in-scope for … expected to existing Conditional Access policies targeting security information registration. Current: New:What[What you need to do toprepare:prepare:] For more information on changes to Microsoft Entra support for passkeys (FIDO2), …- · first version seen
Learn more
Links from the notice and their documentation checksNotices it cites
Other posts named in this oneRelated public changes
- Community source · 9 Nov 2026Microsoft Entra Introduces Conditional Access Policy Plans in Public Preview
- Public source · 9 Nov 2026MC1545694: Microsoft Entra: Updated passkey registration experience in My Sign-ins Microsoft 365 Message Center Archive by Merill Fernando
- Official documentation · 5 Nov 2026Conditional Access grant controls
- Public source · 5 Nov 2026MC1540327: Action required: Prepare users who can’t use passkeys for SMS and voice retirement Microsoft 365 Message Center Archive by Merill Fernando
- Official documentation · 4 Nov 2026Microsoft-managed Conditional Access policies
- Public source · 4 Nov 2026Scale access controls with Microsoft Entra Conditional Access policy plans
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.