Microsoft Entra IDCreate and Manage Custom Conditional Access Authentication Strengths
In brief
Learn how admins can create custom authentication strengths with advanced options for passkey (FIDO2) security keys and certificate-based authentication.
What Entra admins need to know
Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
Open on Microsoft Learn ↗The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.
For Description, you can provide an optional description.
Select the available methods that you want to allow. For example, to create a custom authentication strength
forthat requires QR code sign-in,in for a group of users such as frontline workers, expand Single factor authentication, and then select QR code.Select Next and review the policy configuration.
@@ -2,7 +2,7 @@ title: Create and Manage Custom Conditional Access Authentication Strengths description: Learn how admins can create custom authentication strengths with advanced options for passkey (FIDO2) security keys and certificate-based authentication. ms.topic: how-to-ms.date: 09/15/2025+ms.date: 06/26/2026 ms.reviewer: inbarc ms.custom: sfi-image-nochange ---@@ -27,7 +27,7 @@ An authentication strength is a Microsoft Entra Conditional Access control that 1. For **Description**, you can provide an optional description. -1. Select the available methods that you want to allow. For example, to create a custom authentication strength for QR code sign-in, expand **Single factor authentication**, and then select **QR code**.+1. Select the available methods that you want to allow. For example, to create a custom authentication strength that requires QR code sign-in for a group of users such as frontline workers, expand **Single factor authentication**, and then select **QR code**. 1. Select **Next** and review the policy configuration.