...
- Give the policy a Name, e.g. "Enable FIDO 2 FIDO2 for Signin"
- Enter a Description for the policy (optional)
- Choose Windows 10 and later as the Platform
- Choose Identity protection as the Profile type
- On the Settings tab set Use security keys for sign-in to Enable
- Click OK
- Click Create
...
Enable combined security information registration
The next second step is to enable combined security information registration. The feature needs to be enabled from the Azure (AD) Portal.
...
- Select All to switch on the features for all users
- Click Save
Enable FIDO2 security keys as Authentication
...
method
The third step is to enable FIDO2 security keys as Authentication method in Azure Active Directory.
- In the Azure AD Portal browse to Azure Active Directory
- Browse to Security – Authentication methods
...
- Click FIDO2 Security Keys
- Set Enable to Set ENABLE to Yes
- Leave TargetTARGET set to All or switch to Select users and select a security group
- Click Save
...