The article date was updated to October 7, 2026, and the note about gradual Microsoft-managed deployment through September 2026 was removed.
Keep up with Microsoft Entra
Daily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
Day in brief
Entra outlines late-October passkey expansion for B2B and first MFA registration
Two Microsoft Entra ID announcements point to a late-October 2026 authentication expansion. B2B users in resource tenants are slated to gain passkey registration and sign-in, while users generally will be able to register passkeys or passwordless sign-in as their first multifactor authentication method without setting up SMS or voice first. Documentation updates also remove September rollout language, and Verified ID partner material adds HYPR.
- B2B users are slated to gain passkey registration and sign-in
Entra ID · Conditional AccessStarting in late October 2026, resource tenants are expected to support passkey registration and sign-in for B2B users. Internal guest users will get Microsoft Authenticator app passkeys, while external users will not. The capability is described as enabled by default and intersecting with SMS and voice retirement policies.
- Passkeys can become users’ first multifactor authentication methodEntra ID · Conditional Access
A phased rollout beginning in late October 2026 will let users register passkeys or passwordless sign-in as their first multifactor authentication method, removing the need to establish SMS or voice authentication first. The announcement says no user action is required.
- System-preferred authentication guidance removes September rollout wording
Entra ID · AuthenticationThe article date changed to October 7, 2026, and the note describing gradual Microsoft-managed deployment through September 2026 was removed. The page no longer presents that September rollout language as ongoing.
- Registration campaign guidance drops its September completion estimateEntra ID · Authentication
The article no longer says the registration campaign rollout was expected to finish by the end of September 2026 or that tenant experiences might differ during the rollout. No administrator action is indicated in the supplied update.
- HYPR is added to the Verified ID identity-verification partner gallery
Verified ID · GeneralThe gallery now lists HYPR, links to its documentation, and describes its integration for workforce identity verification. Administrators and developers comparing partners can evaluate it for remote onboarding, secure access, and account recovery.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
6 updates
Microsoft Entra ID
4 updatesThe article no longer states that the registration campaign rollout is expected to finish by the end of September 2026 or that tenant experiences may differ during the rollout.
Microsoft Entra ID will support passkey registration and sign-in for B2B users, enabling phishing-resistant MFA in resource tenants starting late October 2026. Internal guest users get Microsoft Authenticator app passkeys; external users do not. The feature is enabled by default, intersecting with SMS/voice retirement policies. No action required, but administrators should review policies.
Microsoft Entra will allow users to register passkeys or passwordless sign-in as their first multifactor authentication method, removing the need to set up SMS or voice first. This phased rollout begins late October 2026, aiming to ease adoption of phishing-resistant authentication without requiring user action.
Microsoft Entra Verified ID
2 updatesThe Microsoft Entra Verified ID updates page now lists HYPR as an API-based integration partner.
The Entra Verified ID identity verification partners page now lists HYPR, with a link to HYPR documentation and a description of its integration for workforce identity verification.