How to register a FIDO2/U2F key for Micro$0ft o365 Users
User registration and management of FIDO2 security keys
- Browse to https://myprofile.microsoft.com.
- Sign in if not already.
- Click Security Info.
- If the user already has at least one Azure AD Multi-Factor Authentication method registered, they can immediately register a FIDO2 security key.
- If they don’t have at least one Azure AD Multi-Factor Authentication method registered, they must add one.
- A Administrator can issue a Temporary Access Pass to allow the user to register a Passwordless authentication method.
- Add a FIDO2 Security key by clicking Add sign-in method and choosing Security key.
- Choose USB device or NFC device.
- Have your key ready and choose Next.
- A box will appear and ask the user to create/enter a PIN for your security key, then perform the required gesture for the key, either biometric or touch.
- The user will be returned to the combined registration experience and asked to provide a meaningful name for the key to identify it easily. Click Next.
- Click Done to complete the process.
Sign in with passwordless credential
In the example below a user has already provisioned their FIDO2 security key. The user can choose to sign in on the web with their FIDO2 security key inside of a supported browser (such as Chrome) on Windows 10 version 1903 or higher.
Once entered, the user may be prompted for their PIN, they should enter their PIN and click “Next“. The use should then perform the gesture (press the button) for the key or bio-metric device.
