Build Passwordless offering with Microsoft Azure AD and YubiKeys

COVID-19 has disrupted the business norm and forced most organizations, including many Yubico partners, to adjust their security strategies. Our partners have had to recommend and implement the right technologies that will enable their customers, who are now managing expanded remote workforces, to achieve secure access to critical applications – all while maintaining business continuity.  

Companies have become smarter about how they address:

  • Investments in cybersecurity
  • BYOD and connectivity to internal networks
  • Employee productivity 
  • VPN overload

A recent Forrester Report¹ cited 10 security and risk technologies to pay attention to as a result of the pandemic, with one major disruptor being  the shift away from weak password requirements. Many authentication solutions that were good enough a few years ago, do not protect against modern malware, phishing or man in the middle attacks. By moving beyond passwords to hardware-based security keys, organizations are enabling the strongest form authentication, that is proven to mitigate account takeovers, with unsurpassed ease-of-use. 

It has been our long standing mission to make the internet safer for everyone. By being a pioneer for security keys with our YubiKey, and co-creating open security standards such as FIDO2 and WebAuthn, major platform companies, like Microsoft, are helping to drive the global business world towards the elimination of passwords. 

Microsoft has been incorporating FIDO2 flows that support YubiKey strong authentication features that work natively with Azure Active Directory, Windows 10 and Microsoft 365 applications. Incorporating these types of identity verifications in conjunction with hardware-based authentication, hardens the security and mitigates remote phishing attacks. 

Together with Microsoft, we are announcing a Go Passwordless Pilot Program where qualified Services Providers (e.g. systems integrators, consulting services) in Canada, EU, UK and US can nominate their customer to pilot the Azure Active Directory Passwordless flow. For a limited time, Yubico and Microsoft are offering 25 free YubiKeys to up-to 100 qualified customers to pilot the Microsoft Azure AD Passwordless flow and YubiEnterprise Delivery (YED) service

“I believe this offering is a compelling program. It fits well with our respective missions to help everyone achieve more and make the internet safe for everyone.” – Sue Bohn, Partner Director of Program Management in the Identity Division at Microsoft.

To get started and check qualifications:

  1. Services Provider will need to identify a customer (500+ Azure AD Users) that has the technical FIDO2 requirements to go passwordless 
  2. Enroll your organization into the program. If you have an Azure AD + Yubico Passwordless practice – share the link with us when you sign up!
  3. Then, nominate the customer for the pilot
  4. If you and your customer are selected for the pilot, we will contact you for shipping details

Pilots requirements: Windows 10 version 1903 or later, Azure Active Directory and Yubico’s YubiKey 5 series, Microsoft Azure AD MFA enabled users, and integrate Azure AD with Microsoft and 3rd party applications; such as Office 365, Salesforce, and ServiceNow.

Services Partners such as Patriot Consulting (US), InSpark (NL),  ThirdSpace (UK) Skill (NO), Magellan Securite (FR), SPIE (FR) have already built  Microsoft 365 integrations with YubiKeys. Nominate your customer by going to Go Passwordless Customer Pilot Program

We encourage businesses to build their practice by incorporating strong, hardware-based authentication methods. 

 Stina Ehrensvard, CEO and founder of Yubico and Sue Bohn, Partner Director of Program Management in the Identity Division at Microsoft, discuss the Go Passwordless Pilot Program and how both companies are helping to drive open standards and passwordless momentum.

¹ Csar, Andras; et al, “The Top Security Technology Trends To Watch, 2020,” June 30, 2020

Talk to our teamTalk to our team

Share this article:


  • FIPS certified vs. FIPS compliant: What’s the real difference?“Is your MFA solution FIPS compliant, or is it certified?”  This is a question we hear a lot, and for good reason. In industries where security and compliance are critical (especially in government contracts), understanding the difference between FIPS certified and FIPS compliant isn’t just semantics – it can mean the difference between meeting requirements […]Read moreFIPSNIST
  • 2025 Global State of Authentication survey: A world of difference in cybersecurity habitsIn a world that’s more connected than ever, the landscape of cybersecurity threats is constantly evolving. Bad actors, now supercharged with artificial intelligence (AI), are becoming increasingly adept at exploiting human error through sophisticated phishing and social engineering attacks. This makes robust cybersecurity a universal issue, impacting everyone from individuals to the largest global enterprises. […]Read moreGlobal State of Authenticationsurvey
  • Making digital security a right: Inside Yubico’s Secure it Forward programTechnology can be a great equalizer — but only if the strongest protection is within reach. Since 2022, Yubico has donated more than 65,000 YubiKeys to hundreds of organizations worldwide — a retail value of over $3.3 million. Each key helps strengthen digital protection for those doing vital work in their communities. This isn’t just […]Read more
  • Yubico LogoYubico liefert PIN-Verbesserungen mit dem neuen YubiKey 5 – Verbesserte PIN-SchlüsselTo prepare for continuously evolving cyber threats, governments around the world are adapting and updating authentication requirements for online services which directly impact thousands of organizations and their employees. While there’s currently no universal regulation for more robust multi-factor authentication (MFA), the need is highlighted across a range of requirements including PSD2, GDPR, and the […]Read moreYubiKey