Passkeys do not work with Microsoft 365

@OAW ,

Can you confirm whether you are opening this page in Safari? If yes then this is as David mentioned and Microsoft accounts do not support passkey creation and sign-in using Safari.

In this case you'll need to use another browser such as Chrome (I've tested using Edge and this works as well).

Selecting "Add a new way to sign in or verify" should present you with the following options:

From here you can follow the instructions provided by David to save your Microsoft passkey in 1Password.

Let me know how that goes.

Edit: some grammar correction.

@TimG1P It would appear I completely missed the “non-Safari” part in David’s reply. I do see that option in Edge … which I only keep installed as a backup for the rare occasion I encounter a website that doesn’t work in Safari. But I will just ignore the message in Watchtower now since I’m not going to switch browsers just to use a passkey on Microsoft sites. It’s just not that serious! Thanks for the assist.

Hey @OAW,

Thank you for your reply, please let us know if there's anything else we can help with at all.

Confirm that is still not working (chrome and safari) on October 22 2023

It is Oct 21 2023 now and the 1Password Chrome Extension + Passkey still does not work for Microsoft 365.

The way to reproduce:

• The system admin should have enabled FIDO2 in the "Authentication methods | Policies" at "Microsoft Entra Admin Center": https://entra.microsoft.com/

• Go to "Microsoft 365 My Sign-Ins > Security Info" at https://mysignins.microsoft.com/security-info
• Click "Add sign-in method"
• Select "Security key" in the dropdown menu, then click "Add":

• Click "USB Device", then click "Next":

• Microsoft 365 will redirect to a new page to setup the security key, where the 1Password Chrome Extensions popup will show up as expected. Save the passkey in the 1Password popup.
• After the passkey is saved in 1Password, the Microsoft 365 will redirect back to the last step:

• After typing in the name, click "Next". Microsoft 365 then will fail to save the Passkey:

Confirming I have the exact same problem following the steps sukka mentioned.

I'd say that, just like @wavesound mentioned, Microsoft stills doesn't support passkeys for work or school accounts in Microsoft 365, and that's what's causing the issue shown in detail in @sukka's post.

I went through exactly the same flow and got the same error earlier this year when I tried to register a physical security key which turned out to be incompatible. Once I had a key that was compatible, I was able to add it without issue.

Also, some other services, like Google, makes a clear difference between physical keys and passkeys already in the settings menu where you choose which method configure. I expect Microsoft to distinguish between the two by adding a method called Passkey in addition to the already present Security key method. It's just confusing to choose the Security key method and then choose between a USB device and NFC device when it's neither.

Confirming same issue as above.
Edge: Version 119.0.2151.44 (x64)
1Password for Windows 8.10.20 (81020020)
Windows 10 22H2, 11 22H2 and 11 22H3, all recent updates applied.

Just hopping in to add my experience with this as well. Like others, I am unable to use iOS or MacOS (Safari) to add a passkey for my personal Microsoft account. Considering 1Password knows that I only use Apple devices, it would be nice to have the alert in 1Password to add a passkey removed until such a time as 1Password has verified support for my devices with the account in question! @steph_giles

"Beginning January 2024, Microsoft Entra ID will support device-bound passkeys stored on computers and mobile devices as an authentication method in public preview, in addition to the existing support for FIDO2 security keys. This enables your users to perform phishing-resistant authentication using the devices that they already have."

https://janbakker.tech/prepare-for-passkeys-in-entra-id/

https://learn.microsoft.com/en-us/entra/fundamentals/whats-new#public-preview---device-bound-passkeys-as-an-authentication-method