Azure AD CBA with YubiKey is also supported with the brokered authentication flow using latest Microsoft Authenticator ( Android or iOS/iPadOS) for all apps that are not already on the latest MSAL. You should be able to use CCID compatible smart cards against Azure AD for authentication.Īll native apps, including Microsoft first-party apps using the latest Microsoft Authentication Library (MSAL), support Azure AD CBA with YubiKey on mobile devices. With iOS 16 and iPadOS 16.1, Apple added native support for physical smart card authentication using an NFC or a CCID class-compliant reader. Microsoft's mobile certificate-based solution coupled with the hardware security keys is a simple, convenient, Federal Information Processing Standards (FIPS) certified phishing-resistant MFA method. Customers can now provision certificates on a hardware security key, which can then be used for authentication with Azure AD on iOS and Android devices.
US Cybersecurity Executive Order 14028 requires the use of phishing-resistant MFA on all device platforms. We’re excited to share with you more about the general availability of Azure AD CBA on iOS and Android devices using certificates on hardware security key via USB and NFC. We always love to hear your feedback and suggestions and look forward to hearing from you! Let us know what you think in the comments below or reach out to us on Twitter ( ). To tell you more about the support for Azure AD CBA on mobile, I’ve invited Vimala Ranganathan, Product Manager on Microsoft Entra, to walk you through the details of phishing-resistant MFA on mobile. With Bring Your Own Device (BYOD) on the rise, this feature will give you the ability to require phishing-resistant multi-factor authentication (MFA) on mobile without having to provision certificates on the user’s mobile device. We support both on-device certificates and external hardware security keys, like YubiKeys over USB or NFC on iOS and Android devices. Now, we’re thrilled to announce the general availability of Azure AD CBA support on mobile.
At Ignite 2022, we announced the general availability of Azure Active Directory (Azure AD) Certificate-Based Authentication (CBA) as a part of Microsoft’s commitment to Executive Order 14028, Improving the Nation’s Cybersecurity.
0 kommentar(er)
