Azure Entra ID passkey from macOS Safari and 1Password possible? What with Passwords?

Trying to set up Entra ID to allow me to use a passkey stored in 1Password using Safari. These might not be the right steps (maybe not even close to what needs doing), but it is what I'm trying out at the moment. And just to be clear, ideally I would not want to use Microsoft Authenticator at all.

TLDR; So far as I can tell, this is either not possible yet or I don't know how to do it — I'm an optimist.

As of May 31st 2025, with the following setup:
MacBook Air M4 32GB
macOS (and Safari) Sequoia 15.5 public release
1Password for Mac 8.10.78 (81078043, on PRODUCTION channel)
1Password for Safari 8.10.76.34
Passwords Settings has "Automatically Create Passkeys" setting enabled.

Passkeys are enabled: Sign in to portal.azure.com > Search Microsoft Entra ID > Select Authentication Methods under Feature Highlights in the main right pane area (no left menu option) > Policies on the left menu > Passkey (FIDO2) > Enable and Target > Enable (if it isn't) and Include All Users > click on the Configure tab > Enforce Restrictions to Yes so that we can Add AAGUID to add the AAGUID from 1Password (though this appears to be just so it can allow 1Password as a passkey manager with the Enforced key restrictions setting and identify the passkey manager as 1Password) > Save

After that, and while you are logged in, in a different tab, visit https://aka.ms/mysecurityinfo or click on your Avatar on the top right > View account which will open in a new tab > and click on Security info on the left panel.

Now you're in your profile where you should be able to setup a passkey. This is an ideal way to test that whatever settings were setup, or enabled, work. Please note that I'm avoiding adding choice words throughout this post to describe how I feel about — the terrible and inhumane; ugh, that slipped out — Microsoft's UX (and to a large extent their UI).

Click Add sign-in method > select Security key or passkey which might prompt for a new sign in using multi factor authentication > then on the Add a passkey for more secure sign-in*** click Next > and again Next on Setting up your passkey... > use your finger to Continue with Touch ID***** >

*** We'll return to this screen to try the Set up passkey using another device shortly.
***** We'll also return to this screen to try the Other Options (to no avail.)

A dialog is shown called Let's name your passkey and, I believe thanks to the AAGUID, it's prefilled with "iCloud Keychain", with no way I could see or find to use 1Password. Click Next > and now an error will display with Passkey not registered and the body saying "This might be due to a timeout, a canceled request or a private browsing window."

Long story short, nothing will work. I eventually discovered that I could add the AAGUID in the Authentication Strengths page: Microsoft Entra ID > Authentication methods > in the left menu, under Manage > Authentication Strengths.

Trying with the *** Set up passkey using another device got me a QR code which I could take a picture of with the iPhone, and which generated a Passkey 😱 but it cannot be used (changed browsers, deleted cache, and eventually got to use it but it returned an error from Azure). From 1Password on the iPhone, Avatar on the top left > Scan QR Code... option did look at that QR code but didn't know what to do with it. The ***** Other Options option got similar results.

I have screenshots of everything, but there is some sort of limit here in the forums that keeps me from posting them (I kept polishing them and I run out of credit). I'll try again tomorrow.