Entra · Product news
Sign in to Microsoft apps with passkeys from external identity providers
Organizations that use an external identity provider to authenticate Microsoft 365 users can now extend browser-based passkeys, security keys, and eligible single sign-on sessions to supported Microsoft app sign-ins—including Outlook, Teams, OneDrive, Word, Excel, PowerPoint, and Microsoft To Do—on Android, iOS, and managed macOS.
What changed
Organizations using an external identity provider can extend browser-based passkeys, security keys and eligible single sign-on sessions to supported Microsoft application sign-ins on Android, iOS and managed macOS.
Why it matters
The change can reduce password prompts for Microsoft 365 applications, but trust configuration, platform support and Conditional Access behavior must be validated for each external identity-provider flow.
Known limitations
- Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.
Now check
- Confirm the supported external identity provider, passkey or security-key method, Microsoft applications and device platforms
- Pilot Outlook, Teams, OneDrive and Office sign-in on Android, iOS and managed macOS
- Validate Conditional Access, device-compliance claims, session behavior, fallback authentication and sign-in logs before broad rollout