question

Johnny-2302 avatar image
0 Votes"
Johnny-2302 asked ·

How do i register a security key (for windows log-in) for my regular Microsoft accounts that are added to my Azure AD tenant?

Hi,

I would like to set up a security key for regular microsoft accounts used on my Windows PC.

I have an AAD tenant where security keys have been enabled for all users. When creating a user in AAD, setting up the key for that user in http://myprofile.microsoft.com/ and then AAD joining my PC, I can login to my PC with the registered security key to that particular account.

However, if I invite an external user with a regular "@outlook" or "@hotmail" account to my AAD, I cant login to http://myprofile.microsoft.com/ since this user is not added to the "Microsoft Services" tenant and can not access application '19db86c3-b2b9-44cc-b339-36da233a3be2'(My Access). Instead I tried setting up the security key in account.microsoft.com for microsoft accounts.

Since my PC is AAD joined with the AAD user, the security option is there during login and with that I tried signing in to my "@hotmail" account on my PC with the security key I set up for that account. That seemed to initially work until it finally said "You can't sign in with this account. Try another account"

Does anyone know how to set up security keys for regular microsoft accounts or how to possibly add this user as an external user to the 'Microsoft Services' tenant.

Thanks!

azure-active-directoryazure-ad-passwordless-authentication
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JamesTran-MSFT avatar image
0 Votes"
JamesTran-MSFT answered ·

@Johnny-2302
I looked into your issue and was able to find the below sources that might help with your issue.


Microsoft Docs:
Set up a security key as your verification method
How to sign in with a security key
Secure password-less sign-in for your Microsoft account using a security key or Windows Hello


External Doc:
How to set up a security key for your Microsoft Account



It also looks like this issue might be more on the Windows 10 side if everything is working as expected with AzureAD. However, if you have any other questions please let me know.


You can also engage our Windows forums, if needed.



Thank you for your time and patience!


· 4 ·
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Johnny-2302 avatar image Johnny-2302 ·

@JamesTran-MSFT
Thanks for looking into my issue! Unfortunately the resources you shared are to set up security keys for your online microsoft accounts. That works for me. However, I am trying to set it up with Windows login.


I will also post in the Windows forum. Thanks for the advice.



1 Vote 1 ·
JamesTran-MSFT avatar image JamesTran-MSFT Johnny-2302 ·

Hi Johnny,
Thank you for the quick reply. I was looking more into your issue and wasn't able to find any other documentation on this from the Azure forums. However, I did find something on the Windows forums, which I'll post below.

Adding a security key for PC login in Windows 10 Build 1903

Please let me know if you have any other questions.
Thank you for your time!


0 Votes 0 ·
JamesTran-MSFT avatar image JamesTran-MSFT JamesTran-MSFT ·

I just wanted to check in and see if you required additional assistance or if you were able to resolve this issue?

If any reply/answer helped resolve your question, please remember to "mark as answer" so that others in the community facing similar issues can easily find the solution.

0 Votes 0 ·
JamesTran-MSFT avatar image JamesTran-MSFT ·

How to set up a security key for your Microsoft Account


0 Votes 0 ·