Core Authentication Methods
A technical guide to Kerberos, NTLM, LDAP bind, passkeys, certificate-based authentication, and Windows Hello for Business, focused on what each method proves and how the backend validates it.
Topic
Passkeys
Passkey architecture, registration, attestation, compatibility, rollout planning, and troubleshooting in Microsoft Entra.
Authentication Protocols Explained
A technical guide to the major authentication protocols and sign-in models used in Microsoft environments, including Kerberos, NTLM, LDAP bind, SAML, WS-Federation, OAuth 2.0, OpenID Connect, passkeys, certificate-based authentication, AD FS, and Microsoft Entra sign-in models.
Passkey Sign-In and Rollout
A technical guide to Microsoft Entra passkey sign-in, including same-device and cross-device flows, compatibility dependencies, and rollout design.
Passkey Registration
A technical guide to Microsoft Entra passkey registration on Windows and mobile, with a focus on credential issuance, MFA bootstrap, platform differences, and backend policy checks.
Passkey Policy and Attestation
A technical guide to Microsoft Entra passkey profiles, AAGUID restrictions, attestation behavior, and the control-plane logic behind passkey governance.
Missing Passkey Registration Options
Technical troubleshooting for when Passkey (FIDO2) does not appear in Security info or Microsoft Authenticator, including Authentication Methods policy, MFA bootstrap, platform support, and authenticator constraints.
How Passkeys Work in Entra
A technical guide to Microsoft Entra passkeys for administrators, including passkey types, registration flows, Authentication Methods policy, Conditional Access, and deployment design.
Passkey Troubleshooting Guide
A technical troubleshooting guide for Microsoft Entra passkeys covering registration failures, Conditional Access loops, Bluetooth issues, orphaned passkeys, compatibility gaps, and Authenticator-specific problems.