If you have a user that has not configured a PIN code to unlock his mobile phone, someone with physical access to the phone could get access to the account of a user. But this might be solved when it goes GA.Īnother disadvantage is around the security of the device. This means you still cannot go completely passwordless. Windows 10 sign-on Azure AD Joined devices and Outlook mobile are currently not supported (to name a few).

The main advantage of this method is that it is really simple to setup and no extra hardware is required.Ī disadvantage is that this cannot be everywhere at the moment.

Select the number on the notification that corresponds to the number on your screen.

Grab your phone and open the notification.

Find out what number is displayed on your logon screen.

The idea behind passwordless sign-in through the Microsoft application is pretty simple: The dangers above can be partially solved by some Azure AD features (Conditional Access, SSPR…), but to completely resolve these dangers passwords need to disseapear! Microsoft Authenticator

Users complaining they need to change their password every x months.

So many dangers and costs are bound to passwords: I actually love the idea behind the passwordless journey. But the question is, should you be piloting or looking into this? The idea

Support for passwordless sign-in through a FIDO2 key for Hybrid Azure AD Joined devices was announced and will be available later.Īll these features are currently in preview or in development, so a lot of this is still fresh.

Passwordless authentication through the Authenticator can be done without an extra Azure Active Directory Premium license.

At Ignite there were two major announcements. Then there was the announcement that FIDO2 keys would be supported to sign into AzureAD and Azure AD joined domain computers.

I personally love this feature as there is no need to buy an extra hardware token and is so easy to set-up. So many articles and announcements have been made around it recently.įirst there was passwordless through the Microsoft Authenticator app. Passwordless has been one of those buzzwords in 2019.

Microsoft passwordless account