Critical Need for Passkey Support in Microsoft Entra External ID (CIAM)

Question

Critical Need for Passkey Support in Microsoft Entra External ID (CIAM)

Elmer Figueroa 25

We urgently need Passkey support (both device-bound and synced passkeys) in Microsoft Entra External ID (CIAM).

Our organization is currently delivering a major customer-facing project, and passwordless authentication is a key security and user experience requirement. While Passkeys are now GA in Microsoft Entra ID for workforce scenarios, we have not seen clear confirmation of GA availability for External ID customer sign-in flows.

For our external customers, supporting:

Device-bound passkeys (FIDO2)

Synced passkeys (platform passkeys such as iCloud Keychain / Google Password Manager)

is critical to meet modern security standards and user expectations.

Without native passkey support in External ID, we are forced to rely on less secure or less user-friendly authentication methods, which significantly impacts both adoption and compliance requirements.

Can the product team please clarify:

Current status of passkeys in Entra External ID (Preview / GA?)

Expected GA timeline (if not yet released)

Whether both device-bound and synced passkeys will be supported for CIAM scenarios

This functionality is essential for our customer projects, and we would greatly appreciate an update on the roadmap.

Thank you.We urgently need Passkey support (both device-bound and synced passkeys) in Microsoft Entra External ID (CIAM).

Our organization is currently delivering a major customer-facing project, and passwordless authentication is a key security and user experience requirement. While Passkeys are now GA in Microsoft Entra ID for workforce scenarios, we have not seen clear confirmation of GA availability for External ID customer sign-in flows.

For our external customers, supporting:

Device-bound passkeys (FIDO2)

Synced passkeys (platform passkeys such as iCloud Keychain / Google Password Manager)

is critical to meet modern security standards and user expectations.

Without native passkey support in External ID, we are forced to rely on less secure or less user-friendly authentication methods, which significantly impacts both adoption and compliance requirements.

Can the product team please clarify:

Current status of passkeys in Entra External ID (Preview / GA?)

Expected GA timeline (if not yet released)

Whether both device-bound and synced passkeys will be supported for CIAM scenarios

This functionality is essential for our customer projects, and we would greatly appreciate an update on the roadmap.

Thank you.

Elmer Figueroa 25 Reputation points

2026-03-11T20:08:02.1866667+00:00

Hello Rukmini,

Thank you for the clarification. I fully understand that passkeys (both device-bound FIDO2 and synced platform passkeys) are currently GA only for workforce identities in Microsoft Entra ID, and that External ID customer sign-in flows do not yet have native passkey support.

Our question is not about a configuration issue or service limitation. We are specifically requesting roadmap visibility.

For planning purposes, we need clarity on:

Whether passkey support for Microsoft Entra External ID (CIAM) is on the product roadmap

If so, whether both device-bound and synced passkeys are planned

An estimated timeline (Preview / GA)

We are delivering a significant customer-facing project, and authentication architecture decisions must be made now. Without roadmap guidance, it is difficult to align long-term security strategy with the platform.

We would greatly appreciate any roadmap insight the product team can share.

Thank you.
Rukmini 35,245 Reputation points Microsoft External Staff Moderator

2026-03-11T20:10:18.08+00:00

Elmer Figueroa

At this time, Microsoft has not publicly announced a roadmap or GA timeline for passkey support in Microsoft Entra External ID (CIAM).

For workforce situations in Microsoft Entra ID, passkeys (FIDO2 device-bound and synchronized platform passkeys) are available; however, the same feature has not yet been verified for External ID customer sign-in flows.

We don't currently have any more details about the GA or Preview timelines for this feature in External ID.
Elmer Figueroa 25 Reputation points

2026-03-11T20:19:03.19+00:00

Thank you for the clarification Rukmini.

We understand that there is currently no publicly communicated roadmap or GA timeline for passkey support in Microsoft Entra External ID.

However, from a customer and project delivery perspective, this creates a significant planning challenge. Passkeys (both device-bound and synced platform passkeys) are rapidly becoming a baseline expectation for modern CIAM solutions, particularly for high-security and regulated environments.

Without roadmap visibility, it is difficult for us to:

Make long-term architectural decisions

Align security strategy with Microsoft’s platform direction

Commit to External ID as the strategic CIAM solution for upcoming initiatives

If a public timeline is not available, could the product team at least confirm whether passkey support for External ID is actively being planned or considered?

Even directional guidance would be extremely valuable for customers making strategic platform decisions.

We appreciate any additional insight you can share. Thks
Rukmini 35,245 Reputation points Microsoft External Staff Moderator

2026-03-11T20:23:17.8733333+00:00

Elmer Figueroa Thank you for your feedback

I appreciate your comments. As of right now, Microsoft Entra External ID does not have a publicly verified roadmap or schedule for passkey support. While Microsoft Entra ID passkeys are available for workforce scenarios, the product team manages the External ID roadmap data, which are not accessible through support. Please keep an eye out for announcements or use the Microsoft feedback Portal to provide feedback for updates.

Answer accepted by question author

1 additional answer

Your answer

Elmer Figueroa 25 Reputation points

2026-03-11T20:08:02.1866667+00:00

Hello Rukmini,

Thank you for the clarification. I fully understand that passkeys (both device-bound FIDO2 and synced platform passkeys) are currently GA only for workforce identities in Microsoft Entra ID, and that External ID customer sign-in flows do not yet have native passkey support.

Our question is not about a configuration issue or service limitation. We are specifically requesting roadmap visibility.

For planning purposes, we need clarity on:

Whether passkey support for Microsoft Entra External ID (CIAM) is on the product roadmap

If so, whether both device-bound and synced passkeys are planned

An estimated timeline (Preview / GA)

We are delivering a significant customer-facing project, and authentication architecture decisions must be made now. Without roadmap guidance, it is difficult to align long-term security strategy with the platform.

We would greatly appreciate any roadmap insight the product team can share.

Thank you.
Rukmini 35,245 Reputation points Microsoft External Staff Moderator

2026-03-11T20:10:18.08+00:00

Elmer Figueroa

At this time, Microsoft has not publicly announced a roadmap or GA timeline for passkey support in Microsoft Entra External ID (CIAM).

For workforce situations in Microsoft Entra ID, passkeys (FIDO2 device-bound and synchronized platform passkeys) are available; however, the same feature has not yet been verified for External ID customer sign-in flows.

We don't currently have any more details about the GA or Preview timelines for this feature in External ID.
Elmer Figueroa 25 Reputation points

2026-03-11T20:19:03.19+00:00

Thank you for the clarification Rukmini.

We understand that there is currently no publicly communicated roadmap or GA timeline for passkey support in Microsoft Entra External ID.

However, from a customer and project delivery perspective, this creates a significant planning challenge. Passkeys (both device-bound and synced platform passkeys) are rapidly becoming a baseline expectation for modern CIAM solutions, particularly for high-security and regulated environments.

Without roadmap visibility, it is difficult for us to:

Make long-term architectural decisions

Align security strategy with Microsoft’s platform direction

Commit to External ID as the strategic CIAM solution for upcoming initiatives

If a public timeline is not available, could the product team at least confirm whether passkey support for External ID is actively being planned or considered?

Even directional guidance would be extremely valuable for customers making strategic platform decisions.

We appreciate any additional insight you can share. Thks
Rukmini 35,245 Reputation points Microsoft External Staff Moderator

2026-03-11T20:23:17.8733333+00:00

Elmer Figueroa Thank you for your feedback

I appreciate your comments. As of right now, Microsoft Entra External ID does not have a publicly verified roadmap or schedule for passkey support. While Microsoft Entra ID passkeys are available for workforce scenarios, the product team manages the External ID roadmap data, which are not accessible through support. Please keep an eye out for announcements or use the Microsoft feedback Portal to provide feedback for updates.

Answer 1

Hello Elmer Figueroa

This feature request is related to customer authentication capabilities in Microsoft Entra External ID (CIAM)

Only work identities in Microsoft Entra ID, including FIDO2 device-bound passkeys and synced platform passkeys, are currently supported by GA. Nevertheless, External ID customer sign-in flows do not currently have native passkey capability.

The request falls under product design and roadmap clarification rather than a service outage or configuration issue because it concerns the product roadmap and feature availability.

Please raise a feedback here https://feedback.azure.com/d365community/forum/22920db1-ad25-ec11-b6e6-000d3a4f0789

Answer 2

Bob Smith 0

Yeah, the weak MFA options, and lack of SSO/SAML capabilities to other Entra ID tenants can be tolerable if there is transparency it is being worked on.

OP check out Auth0 if you want a SaaS solution, or KeyCloak if your team can operate with self-hosting.

We ended up re-platforming to AWS and using Amazon Cognito.

0 comments

Share via

Critical Need for Passkey Support in Microsoft Entra External ID (CIAM)

1 additional answer

Your answer