1.1 Supported authenticators

MyID can work with any FIDO compatible authenticator that meets the technical standards set by the FIDO Alliance and that can pass device attestation checks.

Note: Platform authenticators are not supported for issuance through Entra.

Passkeys may provide single-factor, two-factor, or multi-factor authentication. You can configure MyID to treat FIDO basic assurance authenticators and high assurance authenticators with different levels of trust; for example, you can enable logon to MyID for high assurance authenticators, but disable logon for basic assurance authenticators.

See section 5, Setting up credential profiles for passkeys and section 2.6, Configuring MyID for logon with passkeys for details.