How to Setup passkey for Android

What is a passkey? A passkey, in simplified terms, is a sort of cryptographic 'stamp' that can be used as a replacement for a password and many forms of MFA.  It is tied to your device, and is significantly more phishing-resistant that traditional authentication methods.

If your organization supports passkeys, follow these steps to create one on your Android device.  While there are many options out there for creating passkeys (such as iCloud keychain, Google, etc.) if you intend to use your passkey for CTD-supported services, you must follow these instructions and establish the passkey with Microsoft Authenticator.  Other passkey providers are not supported.

Before beginning, please check these requirements.

Requirements: 

1. Your device must already be enrolled in MAM / MDM.
2. Your version of Android and Microsoft Authenticator must be up to date.
3. Your Android device and computer should have Bluetooth turned on.
4. You must have access to your organization-owned computer during setup.

How to set up a passkey in Microsoft Authenticator:

Open Microsoft Authenticator and find your email account. Click it and select “Create a passkey” then hit Sign in. MFA Approval will be prompted. 

Confirm your login location and approve. Follow the on screen steps in allowing authenticator to use  passkeys.

Once enabled, approval request will be prompted again to proceed in the creation of passkey.

Once completed, you will now be ready to use the passkey to login by selecting “Face, Fingerprint or Pin”

From your work computer, open a private browser window and go to https://office.com then click Sign in.

Click on Sign-in options instead of typing your email address.

Select Face, fingerprint, PIN or security key

Choose iPhone, iPad or Android device

From the Microsoft Authenticator, use the scan function to scan the given QR code.

Once scanned, a prompt to Allow Bluetooth, hit allow and it will connect to the device you are logging into. Click Continue to complete the sign in.

 

Once successful, you will have the “Device connected” status and you will be redirected to the page you are logging in.