This requirement is at the same time a problem for people with many accounts in multiple tenants. In the authenticator app, the account must be selected and the registration started via “Set up phone sign-in”.įor the verification, you have to sign-in again with the TAP and then register the phone with the Azure AD. It is therefore a good idea to perform this setup directly during onboarding. The smartphone must be registered with Azure AD.Ī valid Temporary Access Pass must also be available for the initial setup.The smartphone must be protected by a screen lock.The following requirements must be met in order to use the feature: Now the phone Sign-In feature must be enabled on the smartphone. The steps described above are only half the job. It is best to install the app on your smartphone in advance and then start the process. To be able to use the passwordless sign-in via Authenticator app, it must first be added as a second factor in My Security Portal. But there is a solution for this as well: Microsoft does not currently support FIDO2 sign-in on Android or iOS, so a password would be required for sign-in on the smartphone. Unfortunately, there is still a gap in order to get along completely without a password. So far, we have only used FIDO2 security keys and Windows Hello for Business for sign-in. PowerShell administration without a password.Windows 10 device onboarding and Windows Hello for Business.

Windows authenticator app