Microsoft Entra ID
AuthenticationMfa Registration Campaign
In brief
The documentation now states that Windows Hello for Business registration behavior is separate from passkey profile restrictions.
What Entra admins need to know
Administrators should use this clarification when interpreting nudge-suppression conditions for eligible passkeys and Windows Hello for Business registrations.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| AAGUID-restricted | No | After the user registers one eligible passkey, the nudge is suppressed across OS and browser combinations under this profile’s rule. | | Device-bound with attestation enforced | No | After the user registers one eligible passkey, the nudge is suppressed across OS and browser combinations under this profile’s rule. |
An eligible passkey must meet the applicable profile requirements. Registering a passkey that doesn’t meet those requirements doesn’t satisfy the profile’s nudge-suppression condition. Windows Hello for Business registration behavior is separate from passkey profile restrictions.
Step 2: Evaluate the platform, when required
@@ -224,7 +224,7 @@ Some passkey profiles evaluate credentials separately for each OS and browser co | **AAGUID-restricted** | No | After the user registers **one eligible passkey**, the nudge is suppressed across OS and browser combinations under this profile’s rule. | | **Device-bound with attestation enforced** | No | After the user registers **one eligible passkey**, the nudge is suppressed across OS and browser combinations under this profile’s rule. | -An **eligible passkey** must meet the applicable profile requirements. Registering a passkey that doesn’t meet those requirements doesn’t satisfy the profile’s nudge-suppression condition.+An **eligible passkey** must meet the applicable profile requirements. Registering a passkey that doesn’t meet those requirements doesn’t satisfy the profile’s nudge-suppression condition. Windows Hello for Business registration behavior is separate from passkey profile restrictions. ### Step 2: Evaluate the platform, when required