Users who collaborate as guests or external partners in another organization can now use a passkey to sign in and meet that organization's multifactor authentication requirements.
Until now, passkeys have only worked for people signing in to their own organization. Passkey support for B2B guest users is currently rolling out. Once it reaches the organization, B2B users can also create and use a passkey in the external organization, and they will see the new passkey option.
The external organization must allow a passkey for B2B guest users and can restrict which passkey methods are allowed, similar to internal users via a Passkey profile in the Entra ID authentication methods. Those already eligible for passkeys can use this new option without further steps; it’s available by default for B2B guests.
External users can set up a passkey for that organization from the Security Info page. Just open mysignins.microsoft.com/security-info and switch the organization at the top right.
Next, the guest user can add a new sign-in method and choose Passkey.
Guest users will be guided through setup to add a verification method, or through a passkey registration campaign that invites them to create one.
Once users register a passkey, they can use it to complete the extra verification step each time an organization asks for it, making sign-in faster and more secure than typing a code or approving a prompt on another device.
Entra ID admins can view the Passkey details and delete it if needed.
Or review the sign-in logs for passkey activities.
No comments yet