Passkey Adoption Campaigns with the Conditional Access Optimization Agent
The Conditional Access Optimization Agent now supports passkey adoption campaigns in public preview, helping organizations roll out phishing‑resistant authentication in a structured and automated way.
With this capability, the agent can assess user and device readiness, generate a recommended deployment plan, guide users through required steps, and automatically enforce Conditional Access policies once users are ready. Campaigns progress continuously as prerequisites are met, reducing manual effort for large‑scale passkey rollouts.
Passkey adoption campaigns are managed directly from the Microsoft Entra admin center and are currently targeted at privileged administrator roles. The agent creates Conditional Access policies in report‑only mode first, allowing administrators to monitor impact before enforcement. For more information, see: Deploy passkey adoption campaigns with the Conditional Access Optimization Agent (Preview)
Terms in this update
- Conditional AccessConditional Access is the policy engine in Microsoft Entra ID that evaluates signals such as user, device, location…
- PasskeyA passkey is a phishing-resistant sign-in method based on a cryptographic key pair following the FIDO2 standard. The…
- PhishingPhishing is an attack in which someone uses a deceptive message to obtain credentials, money or access. It…
This is in the weekly digest for week 40 · What changed this week? →
More Entra updates
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
