Microsoft Entra ID: Passkey support for B2B users Beta
Data as of 13 minutes ago (26 October 2026)
Description
B2B users, including internal guest users and external users, will be able to register and sign in with passkeys issued by a resource tenant to meet that tenant's multifactor authentication (MFA) requirements. Today, passkeys are supported for member users in their home tenant. With this update, B2B users can register a resource tenant passkey from the resource tenant's My Security Info page, or in-line during a proof-up prompt or passkey registration campaign, and then use it to satisfy the resource tenant's MFA requirements. This change is on by default. B2B users already in scope for passkeys in your Authentication methods policy will be enabled automatically. No action is required to turn it on. If you want to review or adjust who's affected, update your Authentication methods policy, passkey registration campaign, Conditional Access policies, and user scoping before rollout.
Change history
Added to the roadmap 1 October 2026. Tracked here since 2 October 2026. Earliest target we recorded: October 2026 (since tracked — Microsoft may have moved it before we started watching).
Nothing has changed on this item since tracking began on 2 October 2026. Changes appear here as Microsoft updates the feed.