How to setup Passkey for iOS devices

What is a passkey? A passkey, in simplified terms, is a sort of cryptographic 'stamp' that can be used as a replacement for a password and many forms of MFA.  It is tied to your device, and is significantly more phishing-resistant that traditional authentication methods.

If your organization supports passkeys, follow these steps to create one on your iOS device.  While there are many options out there for creating passkeys (such as iCloud keychain, Google, etc.) if you intend to use your passkey for CTD-supported services, you must follow these instructions and establish the passkey with Microsoft Authenticator.  Other passkey providers are not supported.

Before beginning, please check these requirements.

Requirements: 

1. Your device must already be enrolled in MAM / MDM.
2. Your version of iOS and Microsoft Authenticator must be up to date.
3. Your iOS device and computer should have Bluetooth turned on.
4. You must have access to your organization-owned computer during setup.

How to set up a passkey in Microsoft Authenticator:

Open the Authenticator App

Scroll down to the account you need to setup passkey for (this should be your work email address, shown here as [e-mail])

Select 'Create a passkey'.

At the next screen select sign in

You should receive a prompt. Hit yes.

After you hit yes you will see this screen.

Finish authenticating by entering the number.

Then you should see that the passkey has been created.

Your passkey is now created!

Test signing in:

On your work-issued computer, open a private browser window and go to office.com

Login in with your account.

At this screen select ipad, phone, or android device.

Then go to the account in the Authenticator app and select passkey.

Then select the blue square in the bottom right corner.

Scan the QR Code displayed on your laptop to sign in.

Then hit 'use passkey'. After this you should successfully be signed in to office.com using the passkey you created.