Microsoft Entra updates the passkey registration in My Sign-ins for Microsoft Authenticator users, adding a checkbox, updated link text, and guided steps to start registration. If direct registration fails, users are directed to WebAuthn flow. Rollout is mid-November 2026 to end-November 2027. Inform users accordingly.
Microsoft Authenticator passkey registration gains guided My Sign-ins flow
The most consequential update is an Entra ID passkey-registration experience change for Microsoft Authenticator users. In My Sign-ins, registration gains a checkbox, revised link text, and guided steps; failed direct registration now directs users to the WebAuthn flow. Rollout is scheduled from mid-November 2026 through the end of November 2027. External ID documentation also changes passkey sample links and removes a custom URL domain prerequisite from setup guidance.
- My Sign-ins receives a guided passkey registration experience
Entra ID · Authentication
Microsoft Entra ID is updating passkey registration for Microsoft Authenticator users with a new checkbox, revised link text, and guided steps to begin registration. If direct registration fails, users are directed to the WebAuthn flow. Rollout runs from mid-November 2026 to the end of November 2027.
- External ID sample links now cover passkey listing, registration, and deletion
External ID · Authentication
The JavaScript, React, and single-page application entries now link to samples labeled “List, register, and delete passkeys.” The earlier warning about high-privilege deletion permissions and client secrets in browser code has been removed from the documentation.
- Passkey sign-in guidance drops the custom URL domain prerequisite
External ID · Authentication
The Sign In With Passkey documentation no longer lists a configured custom URL domain as a prerequisite for the setup.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
3 updates
Microsoft Entra ID
1 updateMicrosoft Entra External ID
2 updatesThe JavaScript, React, and single-page application entries now link to samples labeled “List, register, and delete passkeys.” The previous warning about high-privilege deletion permissions and client secrets in browser code was removed.
Sign In With Passkey
Feature updateThe passkey sign-in documentation no longer lists a configured custom URL domain as a prerequisite.
