You can apply passkeys for user authentication for signing in to your Work or School Account with Microsoft Authenticator. You'll then receive a notification through your mobile app for approving or denying the Authenticator app to generate an OATH verification code. You can then enter this code via a sign-in interface.
If you enable both a notification and a verification code, when you register the Authenticator app you can use either method to verify your identity using passkeys.
The following table outlines the available scenarios that you can use to sign in with a passkey using Auth app on your mobile device, with seamless single sign-on (SSO), or with cross-device sign in with Microsoft Authenticator.
|
I want to use a passkey to sign in: |
In this article: |
iOS |
Android |
|---|---|---|---|
|
To a website, like Office, using Authenticator on my mobile device |
Yes |
Coming soon |
|
|
With Seamless SSO for use in multiple Microsoft apps, such as Outlook and Teams |
Yes |
Coming soon |
|
|
To Microsoft Entra ID on another device with Authenticator on my mobile device |
Yes |
Yes |
Same-device sign in using Authenticator
Follow these steps to sign in to Microsoft Entra ID with a passkey in the Auth app on your mobile device.
-
On your iOS device, open your browser and navigate to the app you're trying to access, such as Office.
-
You can sign in with your username or:
-
If you most recently used a passkey to sign in, you're automatically prompted to sign in with a passkey.
-
Otherwise, select Other ways to sign in or Sign-in options, and then select Face, fingerprint, PIN, or security key.
-
-
If you attempt to sign in without a username and multiple passkeys are saved to your device, you're prompted to choose which passkey to use for sign-in.
-
To select your passkey, follow the steps in the iOS operating system dialog. Verify that it's you by using Face ID,Touch ID, or entering your device PIN.
-
You're now signed into Microsoft Entra ID.
Note:Â This feature is coming soon.
Same-device native Microsoft apps sign in
You can use Authenticator on your iOS device to seamlessly sign in with a passkey to native Microsoft apps, such as Microsoft Outlook, SharePoint, and Teams. Similar support for Android devices is coming during preview.
Note:Â This feature is coming soon
Cross-device sign in with Microsoft Authenticator
Follow these steps to sign in to Microsoft Entra ID on another device with a passkey in Authenticator on your mobile device.
-
On the other device where you're looking to sign in to Microsoft Entra ID, navigate to the app you're trying to access, such as Office.
-
You can sign in with your username or:
-
If you most recently used a passkey to sign in, you're automatically prompted to sign in with a passkey.
-
Otherwise, select Other ways to sign in or Sign-in options, and then select Face, fingerprint, PIN, or security key.
-
-
If you attempt to sign in without a username and multiple passkeys are saved to your device, you're prompted to choose which passkey to use for sign-in.
-
To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.
-
A QR code should appear on screen. Now, on your iOS device, open the camera app and scan the QR code.
Note:Â The camera inside the iOS Authenticator app doesn't support scanning a WebAuthn QR code. You need to use the system camera app.
-
Select Sign in with passkey when the option appears.
Note:Â Bluetooth and an internet connection are required for this step and must both be enabled on your mobile and remote device.
-
To select your passkey, follow the steps in the iOS operating system dialog. Verify that it's you by using Face ID, Touch ID, or enter your device PIN.
-
You're now signed into Microsoft Entra ID on your other device.
-
On the other device where you're looking to sign in to Microsoft Entra ID, navigate to the app you're trying to access, such as Office.
-
You can sign in with your username or:
-
If you most recently used a passkey to sign in, you're automatically prompted to sign in with a passkey.
-
Otherwise, select Other ways to sign in or Sign-in options, and then select Face, fingerprint, PIN, or security key.
-
-
To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.
-
A QR code should appear on screen. Now, on your Android device, open the system camera app and scan the QR code. Alternatively, you can also use the camera in Authenticator. Navigate to the passkey account tile and tap on it. Under Passkey details (preview), you'll see a button in the bottom-right corner to scan the QR code.
Note:Â Bluetooth and an internet connection are required for this step and must both be enabled on your mobile and remote device
-
For quicker sign-in, Android allows you to remember some browsers and Windows devices after scanning the WebAuthn QR code. In such cases, instead of having to scan a QR code each time, the device will appear as a selectable option and you will receive a notification on your mobile device to continue the passkey authentication.
-
To select your passkey, follow the steps in the Android operating system dialog. Verify that it's you by scanning your face, fingerprint, or enter your device PIN or unlock gesture.
-
You're now signed into Microsoft Entra ID on your other device.
