{"id":13337,"date":"2025-10-16T04:01:17","date_gmt":"2025-10-15T19:01:17","guid":{"rendered":"https:\/\/m365jp.net\/?p=13337"},"modified":"2025-10-16T04:07:05","modified_gmt":"2025-10-15T19:07:05","slug":"mc1097225-updated-entra-id-upcoming-changes-to-support-passkey-profiles-in-the-authentication-methods-policy-preview","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-10-16-mc1097225-updated-entra-id-upcoming-changes-to-support-passkey-profiles-in-the-authentication-methods-policy-preview","title":{"rendered":"MC1097225 | (Updated) Entra ID: Upcoming changes to support passkey profiles in the authentication methods policy (preview)"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1097225 | (Updated) Entra ID: Upcoming changes to support passkey profiles in the authentication methods policy (preview)<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>10\/15\/2025 18:11:40<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>06\/17\/2025 22:19:12<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>12\/31\/2025 08:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>Updated October 15, 2025: We have updated the rollout timelines below. Thank you for your patience.<\/p>\n<p>In November 2025, we will expand the passkey (FIDO2) authentication methods policy in Microsoft Entra ID to support passkey profiles in public preview. This update will enable granular, group-based control over passkey configurations and introduce new API   schema changes.<\/p>\n<p>[When this will happen:]<\/p>\n<p>Public Preview (Worldwide): We will begin rolling out early November 2025 and expect to complete by early December 2025.  <\/p>\n<p>Public Preview (GCC, GCC High, DoD): We will begin rolling out mid-November 2025 and expect to complete by mid-December 2025.<\/p>\n<p>[How this will affect your organization:]<\/p>\n<p>After this rollout, you&#8217;ll be able to apply different passkey configurations per user group. For example, you will be able to:<\/p>\n<ul>\n<li>Allow the use of specific FIDO2 security key models for user group A <\/li>\n<li>Allow the use of passkeys in Microsoft Authenticator for user group B<\/li>\n<\/ul>\n<p><b>Important: <\/b>If your organization modifies the passkey policy via the Microsoft Azure or Entra portal during preview, the new schema will take effect. If you continue using Graph API or third-party tools to modify the policy, the schema will not change   until General Availability.<\/p>\n<p>These new settings will be available at Microsoft 365 admin center &gt; Home &gt; <i>  Security &gt; Authentication methods &gt; Passkey (FIDO2) settings:<\/i><\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/867be825-f30b-4852-a9f4-5591ba4aa359\">  <\/p>\n<p>As part of this update in November 2025, we will start accepting any <a href=\"https:\/\/www.w3.org\/TR\/webauthn-2\/#sctn-defined-attestation-formats\" target=\"_blank\">  WebAuthn-compliant<\/a> security key or passkey provider when <i>Enforce attestation<\/i> is disabled. This will allow a wider range of security keys and passkey providers to be accepted for registration and authentication in Microsoft Entra ID. To compare this   upcoming update with the current behavior, refer to&nbsp;<a href=\"https:\/\/learn.microsoft.com\/entra\/identity\/authentication\/concept-fido2-hardware-vendor#attestation-requirements\" target=\"_blank\">Microsoft Entra ID attestation for FIDO2 security key vendors<\/a><\/p>\n<p>[What you need to do to prepare:]<\/p>\n<p>This rollout will happen automatically by the specified dates with no admin action required before the rollout. You may want to review your current passkey configuration, notify your admins about this change, and update internal documentation.<\/p>\n<p>Learn more about passkeys in Microsoft Entra ID: <a href=\"https:\/\/learn.microsoft.com\/entra\/identity\/authentication\/how-to-enable-passkey-fido2\" target=\"_blank\">  Enable passkeys for your organization &#8211; Microsoft Entra ID | Microsoft Learn<\/a>&nbsp;(will be updated before rollout)<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>2025 \u5e74 10 \u6708 15 \u65e5\u66f4\u65b0: \u4ee5\u4e0b\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8 \u30bf\u30a4\u30e0\u30e9\u30a4\u30f3\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\u304a\u5f85\u3061\u3044\u305f\u3060\u304d\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002<\/p>\n<p>2025 \u5e74 11 \u6708\u306b\u3001Microsoft Entra ID \u306e\u30d1\u30b9\u30ad\u30fc (FIDO2) \u8a8d\u8a3c\u65b9\u6cd5\u30dd\u30ea\u30b7\u30fc\u3092\u62e1\u5f35\u3057\u3066\u3001\u30d1\u30d6\u30ea\u30c3\u30af \u30d7\u30ec\u30d3\u30e5\u30fc\u3067\u30d1\u30b9\u30ad\u30fc \u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u30b5\u30dd\u30fc\u30c8\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002\u3053\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3088\u308a\u3001\u30d1\u30b9\u30ad\u30fc\u69cb\u6210\u3092\u30b0\u30eb\u30fc\u30d7\u30d9\u30fc\u30b9\u3067\u304d\u3081\u7d30\u304b\u304f\u5236\u5fa1\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u3001\u65b0\u3057\u3044 API \u30b9\u30ad\u30fc\u30de\u306e\u5909\u66f4\u304c\u5c0e\u5165\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u30d1\u30d6\u30ea\u30c3\u30af\u30d7\u30ec\u30d3\u30e5\u30fc (\u5168\u4e16\u754c): 2025 \u5e74 11 \u6708\u521d\u65ec\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012025 \u5e74 12 \u6708\u521d\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>\u30d1\u30d6\u30ea\u30c3\u30af \u30d7\u30ec\u30d3\u30e5\u30fc (GCC\u3001GCC High\u3001DoD): 2025 \u5e74 11 \u6708\u4e2d\u65ec\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012025 \u5e74 12 \u6708\u4e2d\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306a\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u304b:]<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u5f8c\u3001\u30e6\u30fc\u30b6\u30fc\u30b0\u30eb\u30fc\u30d7\u3054\u3068\u306b\u7570\u306a\u308b\u30d1\u30b9\u30ad\u30fc\u69cb\u6210\u3092\u9069\u7528\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u305f\u3068\u3048\u3070\u3001\u6b21\u306e\u3053\u3068\u304c\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u30e6\u30fc\u30b6\u30fc\u30b0\u30eb\u30fc\u30d7 A \u306b\u7279\u5b9a\u306e FIDO2 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ad\u30fc\u30e2\u30c7\u30eb\u306e\u4f7f\u7528\u3092\u8a31\u53ef\u3059\u308b <\/li>\n<li>\u30e6\u30fc\u30b6\u30fc \u30b0\u30eb\u30fc\u30d7 B \u306e Microsoft Authenticator \u3067\u306e\u30d1\u30b9\u30ad\u30fc\u306e\u4f7f\u7528\u3092\u8a31\u53ef\u3059\u308b<\/li>\n<\/ul>\n<p><b>\u5927\u4e8b\u306a\uff1a <\/b>\u30d7\u30ec\u30d3\u30e5\u30fc\u4e2d\u306b\u7d44\u7e54\u304c Microsoft Azure \u307e\u305f\u306f Entra \u30dd\u30fc\u30bf\u30eb\u3092\u4ecb\u3057\u3066\u30d1\u30b9\u30ad\u30fc \u30dd\u30ea\u30b7\u30fc\u3092\u5909\u66f4\u3059\u308b\u3068\u3001\u65b0\u3057\u3044\u30b9\u30ad\u30fc\u30de\u304c\u6709\u52b9\u306b\u306a\u308a\u307e\u3059\u3002Graph API \u307e\u305f\u306f\u30b5\u30fc\u30c9 \u30d1\u30fc\u30c6\u30a3\u306e\u30c4\u30fc\u30eb\u3092\u5f15\u304d\u7d9a\u304d\u4f7f\u7528\u3057\u3066\u30dd\u30ea\u30b7\u30fc\u3092\u5909\u66f4\u3059\u308b\u5834\u5408\u3001\u30b9\u30ad\u30fc\u30de\u306f\u4e00\u822c\u63d0\u4f9b\u307e\u3067\u5909\u66f4\u3055\u308c\u307e\u305b\u3093\u3002<\/p>\n<p>\u3053\u308c\u3089\u306e\u65b0\u3057\u3044\u8a2d\u5b9a\u306f\u3001Microsoft 365 \u7ba1\u7406\u30bb\u30f3\u30bf\u30fc&gt; \u30db\u30fc\u30e0 &gt; <i>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 &gt; \u8a8d\u8a3c\u65b9\u6cd5&gt;\u30d1\u30b9\u30ad\u30fc (FIDO2) \u8a2d\u5b9a<\/i>\u3067\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/867be825-f30b-4852-a9f4-5591ba4aa359\">  <\/p>\n<p>2025 \u5e74 11 \u6708\u306e\u3053\u306e\u66f4\u65b0\u306e\u4e00\u74b0\u3068\u3057\u3066\u3001\u69cb\u6210<i>\u8a3c\u660e\u306e\u5f37\u5236\u304c<\/i>\u7121\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u5834\u5408\u3001<a href=\"https:\/\/www.w3.org\/TR\/webauthn-2\/#sctn-defined-attestation-formats\" target=\"_blank\">WebAuthn \u6e96\u62e0<\/a>\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ad\u30fc\u307e\u305f\u306f\u30d1\u30b9\u30ad\u30fc \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306e\u53d7\u3051\u5165\u308c\u304c\u958b\u59cb\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001Microsoft Entra ID \u3067\u306e\u767b\u9332\u3068\u8a8d\u8a3c\u306b\u3001\u3088\u308a\u5e45\u5e83\u3044\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ad\u30fc\u3068\u30d1\u30b9\u30ad\u30fc \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u3092\u53d7\u3051\u5165\u308c\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u4eca\u5f8c\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u73fe\u5728\u306e\u52d5\u4f5c\u3068\u6bd4\u8f03\u3059\u308b\u306b\u306f\u3001\u300c<a href=\"https:\/\/learn.microsoft.com\/entra\/identity\/authentication\/concept-fido2-hardware-vendor#attestation-requirements\" target=\"_blank\">FIDO2   \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ad\u30fc \u30d9\u30f3\u30c0\u30fc\u306e Microsoft Entra ID \u69cb\u6210\u8a3c\u660e<\/a>\u300d\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044&nbsp;<\/p>\n<p>[\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068:]<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f\u3001\u6307\u5b9a\u3055\u308c\u305f\u65e5\u4ed8\u307e\u3067\u306b\u81ea\u52d5\u7684\u306b\u884c\u308f\u308c\u3001\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d\u306b\u7ba1\u7406\u8005\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u306f\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002\u73fe\u5728\u306e\u30d1\u30b9\u30ad\u30fc\u69cb\u6210\u3092\u78ba\u8a8d\u3057\u3001\u3053\u306e\u5909\u66f4\u306b\u3064\u3044\u3066\u7ba1\u7406\u8005\u306b\u901a\u77e5\u3057\u3001\u5185\u90e8\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u66f4\u65b0\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002<\/p>\n<p>Microsoft Entra ID \u306e\u30d1\u30b9\u30ad\u30fc\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u300c <a href=\"https:\/\/learn.microsoft.com\/entra\/identity\/authentication\/how-to-enable-passkey-fido2\" target=\"_blank\">  \u7d44\u7e54\u306e\u30d1\u30b9\u30ad\u30fc\u3092\u6709\u52b9\u306b\u3059\u308b\u300d\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044 &#8211; Microsoft Entra ID |Microsoft Learn<\/a>&nbsp;(\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d\u306b\u66f4\u65b0\u3055\u308c\u307e\u3059)<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1097225 | (Updated) Entra ID: Upcoming changes to support passkey profiles in the authentication methods pol [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-13337","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/13337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=13337"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/13337\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=13337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=13337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=13337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}