Is it possible to attach a fido2 key to EntraID user via a graph api from another App

Question

Hello, I in EntraID there is an possiblity to add an fido2 key to an user, but the user must do it alone, per documentation an administrator distributing the keys is not supported.

My question is, is it possible via microsoft graph api or another SDK(which I am not aware of or do not mention here) to Automate that process of registering the fido2 key from another app?

For example, I have an Custom Identity Provider in my company which is supporting FIDO2 MFA, we would also like that in the process of when we register a fido2 key for a user to also register that same key in his EntraID profile Programatically via an API, is that possible?

Answer 1

No, not possible currently. Will likely be possible in the future as Microsoft expands support for programmatic provisioning of authentication methods.