FIDO2 Archives - Practical 365

Using Entra ID Support for Passkey Authentication with Microsoft 365

Tony Redmond — Tue, 23 Apr 2024 10:00:00 +0000

Entra ID supports passkeys as an authentication method. In fact, support is a variation of the existing FIDO2 authentication method using device-bound passkeys managed by the Microsoft Authenticator app. Passkeys are a strong phishing-proof authentication method. The question is whether the current implementation will be considered too complicated by regular users.

The post Using Entra ID Support for Passkey Authentication with Microsoft 365 appeared first on Practical 365.

Why Separate Microsoft 365 Administrator Accounts are Critical to Security Posture

Thijs Lecomte — Tue, 18 Jan 2022 07:58:00 +0000

There’s a lot of debate around the need to separate Microsoft 365 administrator accounts, especially when controls such as Privileged Identity Management exist within an organization. However, even with PIM there are remaining security concerns which necessitate the operation of separate accounts. This article explains the importance of using separate accounts; details how to target different Conditional Access policies for admin and user accounts and highlights how this approach increases your security posture and limits potential attack vectors against administrator accounts.

The post Why Separate Microsoft 365 Administrator Accounts are Critical to Security Posture appeared first on Practical 365.

Achieving Passwordless Authentication in Azure AD

Dominik Hoefling — Tue, 11 May 2021 07:26:00 +0000

In the second iteration of a two-part series about FIDO2 and passwordless authentication, we walk you through how to facilitate your passwordless deployment for Azure AD identities. Once passwordless authentication is achieved, users can authenticate up to 3x faster and helpdesks should receive fewer requests for password resets, saving your organization time and money.

The post Achieving Passwordless Authentication in Azure AD appeared first on Practical 365.

Understanding How FIDO Makes Passwordless Authentication Possible

Dominik Hoefling — Thu, 06 May 2021 19:44:04 +0000

FIDO is an open industry alliance dedicated to helping the world move away from traditional passwords. In this article, we explore how the different parts of the FIDO architecture work together to make it possible to consider a passwordless future, even for Microsoft 365 users

The post Understanding How FIDO Makes Passwordless Authentication Possible appeared first on Practical 365.