Microsoft Entra External ID
AuthenticationSign In With Passkey
In brief
The passkey sign-in documentation no longer lists a configured custom URL domain as a prerequisite.
What Entra admins need to know
Administrators reviewing passkey setup no longer need to treat a custom URL domain as a documented prerequisite.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- A Microsoft Entra external tenant. Create a free trial or use an existing external tenant.
- An account with at least the Authentication Policy Administrator role to configure passkey policies.
A custom URL domain configured for your tenant. Passkeys are registered against the custom URL as the relying party.- A sign-up and sign-in user flow associated with your application.
- An app that's registered in your external tenant and added to the sign-up and sign-in user flow.
@@ -26,7 +26,6 @@ In an external tenant, you can use passkeys in two ways: - A Microsoft Entra external tenant. [Create a free trial](https://aka.ms/ciam-free-trial) or use an existing external tenant. - An account with at least the [Authentication Policy Administrator](/entra/identity/role-based-access-control/permissions-reference#authentication-policy-administrator) role to configure passkey policies.-- A [custom URL domain](how-to-custom-url-domain.md) configured for your tenant. Passkeys are registered against the custom URL as the relying party. - A [sign-up and sign-in user flow](how-to-user-flow-sign-up-sign-in-customers.md) associated with your application. - An app that's [registered](../../identity-platform/quickstart-register-app.md) in your external tenant and added to the sign-up and sign-in user flow.