passkey profiles

Passkey profiles are a new feature in Microsoft Entra ID that allows administrators to create multiple, group-scoped FIDO2 passkey policies. This replaces the previous single tenant-wide setting with a flexible, profile-based model. The public preview began in early November 2025, enabling organizations to control which passkey types and providers are allowed for different user groups. The feature also broadens acceptance of attestation formats when enforce attestation is turned off. IT teams should consider implementation and security trade-offs before rollout. This tag covers discussions on configuring passkey profiles, managing FIDO2 controls, and the implications for enterprise security and user authentication.