How do i register a security key (for windows log-in) for my regular Microsoft accounts that are added to my Azure AD tenant?

Johnny 6 Reputation points
2020-07-02T07:24:37.743+00:00

Hi,

I would like to set up a security key for regular microsoft accounts used on my Windows PC.

I have an AAD tenant where security keys have been enabled for all users. When creating a user in AAD, setting up the key for that user in http://myprofile.microsoft.com/ and then AAD joining my PC, I can login to my PC with the registered security key to that particular account.

However, if I invite an external user with a regular "@harsh.com " or "@Karima ben " account to my AAD, I cant login to http://myprofile.microsoft.com/ since this user is not added to the "Microsoft Services" tenant and can not access application '19db86c3-b2b9-44cc-b339-36da233a3be2'(My Access). Instead I tried setting up the security key in account.microsoft.com for microsoft accounts.

Since my PC is AAD joined with the AAD user, the security option is there during login and with that I tried signing in to my "@Karima ben " account on my PC with the security key I set up for that account. That seemed to initially work until it finally said "You can't sign in with this account. Try another account"

Does anyone know how to set up security keys for regular microsoft accounts or how to possibly add this user as an external user to the 'Microsoft Services' tenant.

Thanks!

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,579 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. JamesTran-MSFT 36,541 Reputation points Microsoft Employee
    2020-07-10T20:28:01.543+00:00

    @Johnny-2302
    I looked into your issue and was able to find the below sources that might help with your issue.

    Microsoft Learn:
    Set up a security key as your verification method
    How to sign in with a security key
    Secure password-less sign-in for your Microsoft account using a security key or Windows Hello

    External Doc:
    How to set up a security key for your Microsoft Account

    It also looks like this issue might be more on the Windows 10 side if everything is working as expected with AzureAD. However, if you have any other questions please let me know.

    You can also engage our Windows forums, if needed.

    Thank you for your time and patience!