Authentication Method - FIDO2 security key - Restricted
You can work with your Security key provider to determine the AAGuids of their devices for allowing or blocking usage.
| Name | keyRestrictions.aaGuids |
| Control | Authentication Method - FIDO2 security key |
| Description | Define configuration settings and users or groups that are enabled to use FIDO2 security keys |
| Severity | Low |
How to fix
Microsoft Learn - Enable passkeys (FIDO2) for your organization: Restricted AAGUIDS
Details of configuration item
| Recommendation | |
| Configuration | policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Fido2') |
| Setting | keyRestrictions.aaGuids -notcontains $null |
| Recommended Value | 'true' |
| Default Value | |
| Graph API Docs | fido2AuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 - Microsoft Learn |
| Graph Explorer | Open in Graph Explorer |