Microsoft updates: Entra ID FIDO2 security key support and Azure Virtual Desktop passwordless sign-in

With the use of phishing-resistant multi-factor authentication (MFA) like passkeys growing more every day, it’s exciting to see the widely popular service, Microsoft 365,  announce availability recently for passkeys on YubiKeys with mobile devices. This new Microsoft preview not only opens up support on iOS and iPadOS for Microsoft 365, but for a whole range of other Microsoft 1st party apps and also any other applications protected with Entra ID. 

This has been something on every Yubico and Entra ID customer’s wish list since 2019 when Microsoft first announced preview support for FIDO2 security keys. Customers are now beginning to get the support they have been asking for, and can now use the same YubiKeys that they use on their desktops on their iPhone. Entra ID has long supported passkeys on security keys like YubiKeys on Windows and other platforms, but there has been a lack of support on mobile devices. 

Microsoft initially announced support for passkeys in Safari in July 2023. While this was an important added feature, most customers really needed support using native apps. Now that preview support is finally available. With Microsoft’s new announcement, users now have a complete experience from mobile devices where you’re able to sign-in to both web applications and native apps using a YubiKey. 

How does it work?

To start using your YubiKey in Entra ID on mobile devices you need:

  • An iOS native app protected with Entra ID.
  • The native app protected with Entra ID should use this Microsoft guidance, Apps may require the use of Microsoft Authenticator until the apps are updated by the developers to natively support a passkey sign-in experience. 
  • An Entra ID tenant that has enabled support for passkeys (FIDO2 security keys).
  • An Entra ID account where you have registered a YubiKey 5 Series or YubiKey 5 FIPS Series.

In the below video, we try it out and show you how it works as well as passwordless sign-in on Azure Virtual Desktop, which is another exciting service that Microsoft also recently announced

Once your Azure Virtual Desktop host pools are configured to support passwordless SSO, then you can easily use your security keys to sign-in to these remote desktops to access all your applications on the go with a Windows experience. 

In the video, we use the iOS Remote Desktop application to show both of these two new features together where a user can now use their iPhone and a YubiKey to access their Windows 11 virtual desktops without using a password. 

We are excited to see this more complete passkey support for iOS for Entra ID protected applications. While today Entra ID customers can be phishing-resistant on Android devices using YubiKeys as Smart Cards, we are hopeful that they can also be phishing-resistant using more modern passkeys on YubiKeys. 

To learn more about passkey compatibility with Entra ID, visit here. To learn more about Azure Virtual Desktop visit the page here to learn about configuring passwordless SSO authentication to the AVD session host and also how to configure support for passwordless authentication inside the remote session.

Talk to our teamTalk to our team

Share this article:


  • Introducing the Yubico Academy: Enabling partners for a phishing-resistant futureAt Yubico, strong partnerships are fundamental to a more secure digital world. Our commitment goes beyond providing leading security keys; it’s about actively fostering the growth of our valued partners through impactful enablement programs. A cornerstone is the Yubico Academy, featuring our comprehensive certification program.  This program enables our partners’ teams to become Yubico experts, […]Read more
  • AI is booming — but proving you’re human matters more than everIf you walked the show floor at the RSA Conference this year, you probably noticed the same thing I did: Artificial Intelligence (AI) is everywhere. Agentic AI. AI in threat detection. AI in firewalls. AI in identity management. AI-generated demos. AI everything. The energy around AI was undeniable, and we’re seeing real innovation, efficiency gains […]Read moreAIArtificial IntelligencephishingRSAC
  • Ditching passwords for good: Celebrating the inaugural World Passkey DayHave you ever been stuck in a relationship with someone who constantly lets you down, exposes your secrets, and leaves you vulnerable? Odds are you cut your losses, packed up your things and moved on. Today is the day to do the same with your passwords: say goodbye forever! The reality is a majority of […]Read morepasskeyspasswordlessWorld Passkey Day
  • Digital security’s unique role in protecting our environmentAs sustainability expands to include social, economic, and technological challenges, cybersecurity has emerged as a top global threat – with cybercrime projected to cost $12 trillion this year. Stolen credentials and phishing account for 80% of breaches. At Yubico, making the world more secure is just part of how we care for the world around […]Read moreCSREarth DaySecure It ForwardSustainability