The primary refresh token (PRT) token request with signed nonce is sent to Azure AD.The FIDO2 security key signs the nonce with the private key.The user completes their gesture to unlock the private key stored in the FIDO2 security key’s secure enclave.Windows sends an authentication request.Windows detects the FIDO2 security key.The user plugs the FIDO2 security key into their computer.Before the steps on how to setup passwordless authentication, I would like to explain the authentication flow Support on Microsoft Edge legacy was added in 1903.Before the steps on how to setup passwordless authentication, I would like to explain the authentication flow. BrowserġAll versions of the new Chromium-based Microsoft Edge support Fido2. The following are the minimum browser version requirements. If you would like to see other operating system and browser support, please leave feedback on our product feedback site. The following operating system and browser combinations are not supported, but future support and testing is being investigated. *Key Registration is currently not supported with ChromeOS/Chrome Browser.

Supported device types include USB, near-field communication ( NFC), and bluetooth low energy ( BLE). Microsoft accounts are created by consumers for services such as Xbox, Skype, or. This table shows support for authenticating Azure Active Directory (Azure AD) and Microsoft Accounts (MSA). The following diagram shows which browsers and operating system combinations support passwordless authentication using FIDO2 authentication keys with Azure Active Directory.

The availability of FIDO2 authentication for Microsoft accounts was announced in 2018, and it became generally available in March 2021. Azure Active Directory allows FIDO2 security keys to be used as a passwordless device.

Yubico fido2