Authentication Method for FIDO2 key are missing

Question

Users used to be able to choose the FIDO2 authentication method. After we enforsed a second method of authentication, the FIDO2 option disappeared from the drop down menu. How di I get it back?

Answer 1

Hi

check your security settings in Azure AD and ensure this is enabled and targeted for all users:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-security-key#enable-fido2-security-key-method

Hope this helps,

Thanks

Michael Durkan

• If the reply was helpful please upvote and/or accept as answer as this helps others in the community with similar questions. Thanks!

Answer 2

Thank you for the reply. We have the security key setting enabled and we have targeted all users. on the 'configure' tab, we have turned on 'force attestation'. If I turn it off, I still don't see the authentication method in the drop down menu.

Answer 3

Hi

the article below sounds like the same issue you are having, fix is included.

https://www.inthecloud247.com/add-security-key-option-is-missing-from-the-security-info-page/

Hope this helps,

Thanks

Michael Durkan

Answer 4

Hi Michael,

Thank you very much for the article. I followed all the steps and found that our setting: "isSelfServiceRegistrationAllowed" is already set to 'true'
I am trying to understand why the FIDO authentication option used to be available and now it's not. However, I wonder if it has something to do with us enabling the 'phone number' method? Now that I think about it more, the FIDO method disappeared after we set up the Phone number method.