Recorded 25 Oct 2026 at 18:13 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
Microsoft 365 roadmapMicrosoft 365 roadmap
Microsoft Entra: Windows Hello for Business and macOS Platform Single Sign-on can now be used as a second factor for MFA
Windows Hello for Business (WHfB) and macOS Platform SSO (macOS PSSO) can now satisfy multifactor authentication as a standalone second factor. Previously, these methods only counted as MFA during primary sign-in, and users needed a separate passkey to complete step-up prompts, Authentication Strength policies, and sign-in frequency checks. With this change, WHfB and macOS PSSO work on their own for those scenarios, so more of your users can rely on strong, phishing-resistant sign-in without registering an extra method. What you need to know: Users who have only WHfB or macOS PSSO are now treated as MFA-capable and will no longer be automatically prompted to register another method. Because WHfB and macOS PSSO are tied to a specific device, we recommend having users register a portable method, such as a passkey or Microsoft Authenticator, during onboarding so they can complete MFA from any device.
What it said
Roadmap ID
568076
Status
In development
General availability target
October CY2026
Preview target
Not stated
Products
Microsoft Entra
Clouds
Worldwide (Standard Multi-Tenant), GCC
Release phases
General Availability
Platforms
Desktop, Mac
Added to the roadmap
11 Aug 2026 22:53 UTC
Last changed
11 Aug 2026 22:53 UTC
Source evidence when recorded
Microsoft 365 roadmap
IncompleteRead 25 Oct 2026 at 17:11 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.