Microsoft Entra ID
AuthenticationEnable Authenticator Passkey
In brief
The documentation now states that iOS users can register attested passkeys only directly in the Authenticator app, while Android users can register them directly or through cross-device registration.
What Entra admins need to know
Administrators should use the platform-specific registration guidance when enabling or supporting attested passkeys.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
To learn more about FIDO2 support, see Support for FIDO2 authentication with Microsoft Entra ID.
@@ -32,7 +32,7 @@ Before you follow the steps in this article, enable passkeys and create a passke iOS | `cable.auth.com`<br>`app-site-association.cdn-apple.com`<br>`app-site-association.networking.apple` > [!NOTE]- > On iOS, users can't use cross-device registration if you enable attestation. On Android, cross-device registration supports attestation.+ > On iOS, users can only register attested passkeys directly in the Authenticator app. On Android, users can register attested passkeys directly in the Authenticator app and by using a cross-device registration flow. To learn more about FIDO2 support, see [Support for FIDO2 authentication with Microsoft Entra ID](concept-fido2-compatibility.md).