Enable security keys for Windows sign-in
We need to enable the the security keys as a sign-in option for our Windows 10 devices in Microsoft Intune. In Intune this can be done by enabling this as part of a tenant wide Windows Hello for Business (WHfB) setting or by deploying an Identity Protection configuration policy.
...
- Click Assignments to assign the policy to the security group of choice
Enable combined security information registration
The next step is to enable combined security information registration. The feature needs to be enabled from the Azure (AD) Portal.
...
- Select All to switch on the features for all users
- Click Save
Enable FIDO2 security keys as Authentication methode
The third step is to enable FIDO2 security keys as Authentication method in Azure Active Directory.
...