365Fanatic / Product updates / Entra
Microsoft Entra · Authentications (Logins)

Expanded policy storage for passkeys (FIDO2) in Microsoft Entra ID

Released May 2026
SummaryDetailedTimelineProduct updatesThis weekMC SummaryMC DetailedPnP Search

We increased the passkey (FIDO2) policy size limit in the authentication methods policy to a dedicated 20-KB allocation.

Previously, all authentication methods shared a single 20-KB policy size limit. With this update, a dedicated 20-KB limit is now allocated specifically to the passkey (FIDO2) policy, while the remaining authentication methods continue to use their existing limit.

This change helps address scenarios where tenants approach the overall policy size limit, which can block configuration of passkey profiles. By separating passkey policy storage, organizations can more easily adopt passkeys and configure advanced targeting scenarios.

In addition, the maximum number of passkey profiles per tenant has been increased from 3 to 10.

Terms in this update

View at Microsoft ↗ All Entra updates

This is in the weekly digest for week 40 · What changed this week? →

More Entra updates

Generally availableJune 2026 Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows Generally availableApril 2026 Configurable Token Lifetime Policies Generally availableApril 2026 Entra CBA Certificate Authority (CA) scoping in Microsoft Entra allows tenant administrators… Generally availableApril 2026 Entra CBA as third option in system-preferred MFA methods Generally availableApril 2026 Issuer Hints for Microsoft Entra CBA Generally availableApril 2026 Microsoft Entra Certificate-based authentication (CBA) support on iOS and CBA as second factor

Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.