Microsoft Entra ID to Automatically Enable Passkey Profiles by March 2026

Beginning in March 2026, Microsoft Entra ID will roll out automatic enabling of passkey profiles and introduce synced passkeys. This update aims to enhance security management for organizations by allowing administrators to configure passkey policies based on user groups rather than applying settings universally across the tenant.

The key feature of this update is the introduction of a new property called passkeyType. This setting enables administrators to specify the types of passkeys that users can register, including device-bound passkeys, synced passkeys, or a combination of both. This granular control is expected to improve security practices within organizations.

Microsoft plans a staged rollout for this feature. Organizations can opt in during the initial rollout window, while those that do not will automatically transition during a later migration period. Existing FIDO2 passkey authentication settings will be migrated into a default passkey profile, with the passkeyType value determined by the tenant’s current configuration.

Additionally, tenants that already allow synced passkeys will experience updates to Microsoft-managed registration campaigns, which will now include passkeys in their registration flow. This change indicates a shift towards more integrated passkey management within Microsoft’s ecosystem.

Organizations should take this opportunity to review their current FIDO2 and passkey settings before the March 2026 deadline. Understanding the implications of these changes will be crucial for maintaining security and compliance.

Implications for Organizations

This transition to passkey profiles reflects a broader trend in cybersecurity towards enhanced user authentication methods. As organizations adopt these new features, they should consider the potential risks and benefits associated with passkey management.

Organizations may want to monitor their user groups and assess how passkey policies will impact their security posture. By proactively managing passkey settings, organizations can mitigate risks associated with unauthorized access and improve overall security.

As this rollout approaches, it is advisable for organizations to stay informed about updates from Microsoft and prepare for the changes to ensure a smooth transition.