General

This checks whether FIDO2 can be set by users as an authentication method.

Rationale

FIDO2 is a standard that offers phishing-resistant security keys for authentication. This includes the well-known USB keys such as those from YubiKey, but Passkeys also work on the basis of the FIDO2 standard.

By allowing FIDO2 as a method, users can opt for this form of authentication to optimally protect their account.

Attic Fix

A fix is available for this check! This will be offered via a ticket in Attic after which you can accept it.

Manual instruction

Follow these steps to adjust the setting:

1. Go to the Entra ID portal via https://entra.microsoft.com
2. Go to Protection and then Authentication Methods
3. Click on Passkey (FIDO2)
4. Under Enable and Target, select All Users and under Configure, enable the option to allow Self-Service Set Up
5. Click on Save

More information

1. https://aka.ms/fido2docs