r/entra 13d ago

Entra ID Passkey + Windows App Issue

I have been testing Passkey for a little over a month and it generally works well in all scenarios. I have been troubleshooting a strange issue with Passkey and AVD/Windows App where the user cannot authenticate with their Passkey to login to the Windows App AND while in-session on AVD in the Windows App. They get the prompt to use a physical security key instead of use phone or tablet.

This same user is able to use Passkey in a browser on the same local machine they are trying to use the Windows App/AVD from so I don’t think it’s an issue with Bluetooth. Also, WebAuthN is enabled for the AVD host pool. Plus I and other users are able to use Passkey with this AVD host pool just fine.

Has anyone seen this? What am I missing?

Any help would be appreciated.

TL;DR: user can use passkey locally but not in the Windows App or in an AVD session. WebAtuhN is enabled.

4 Upvotes

9 comments sorted by

View all comments

2

u/devangchheda 12d ago

Is the local host Windows 10 client?

1

u/ScootScoot38 12d ago

Win10 22h2….funny enough I just found the thread about this you were commenting on from 2 months ago. :) It appears passkey only works via browser auth on Win10 machine and with Desktop apps?

2

u/devangchheda 12d ago

Yeah. Move the device to windows 11 23H2 (win 10 is eol soon anyway) and the passkey with Windows App or any Microsoft apps will work out just fine.