The wizard covers all kinds of your identities, such as Frontline workers who have their own devices or identities that share the same hardware at work. Luckily, Microsoft includes the passwordless wizard in the Microsoft 365 admin center to help organizations determine which devices and passwordless authentication methods best fit their infrastructure and needs: Figure 1: The passwordless wizard in the Microsoft 365 admin center.įor example, if your users have PCs with biometric hardware, they can use Windows Hello for Business and leverage single sign-on capabilities for their local and cloud-based resources. Sometimes, due to regulatory or legal restrictions, companies are unable to use USB hardware, or USB ports must be disabled.įirst, you’ll want to get an idea of what your rollout will look like for scaling and planning purposes.
To test the waters, you should include the use of USB tokens in proof-of-concept projects to understand if passwordless authentication is achievable. Rest assured, the FIDO2 standard withstands the most common threats to authentication methods.
Phone sign-in with the Microsoft Authenticator app (Roaming Authenticator, software)Īt first, it might sound counterintuitive to tell users they will be able to log in to their computers and Microsoft 365 services without a password.Security key sign-in with FIDO2 security keys (Roaming Authenticator, hardware).
Windows Hello for Business (Platform Authenticator, hardware).You can deploy three different passwordless authentication methods for your Azure AD users: Users can authenticate up to 3x faster and helpdesks should receive fewer requests for password resets, saving the organization money.įirst announced at the Microsoft Ignite conference in March 2021, passwordless authentication for Azure AD is globally available. Passwordless authentication reduces the risk of phishing and password spray attacks by removing the need to use traditional passwords. This is the second iteration of a two-part blog series about FIDO2 and passwordless authentication, with the first part covering FIDO2.
0 kommentar(er)
