Microsoft Entra ID: Passkey support for B2B users
Why it matters: Breaking change — admin action may be required
From Microsoft's description: “No action is required to turn it on.”
⏰ Act before October CY2026 · overdue
<p>B2B users, including internal guest users and external users, will be able to register and sign in with passkeys issued by a resource tenant to meet that tenant's multifactor authentication (MFA) requirements. Today, passkeys are supported for member users in their home tenant. With this update, B2B users can register a resource tenant passkey from the resource tenant's My Security Info page, or in-line during a proof-up prompt or passkey registration campaign, and then use it to satisfy the resource tenant's MFA requirements. This change is on by default. B2B users already in scope for passkeys in your Authentication methods policy will be enabled automatically. No action is required to turn it on. If you want to review or adjust who's affected, update your Authentication methods policy, passkey registration campaign, Conditional Access policies, and user scoping before rollout.</p>
How this was classified (derived by the tracker — not Microsoft's label)
- breaking · 80% confidence · matched action-required
No action is required to turn it on.
Affected: Microsoft Entra