How to Configure a FIDO2 Security Key for MFA

Objective

Configure a FIDO2 security key as an MFA method. 

Environment

• Microsoft 365 Accounts 

• Supported FIDO2 security keys 

Procedure

1. Acquire a FIDO2 security key through IT Services.
2. Open the Microsoft My Account portal and sign in using your UWin account.
3. Click on Security Info on the left.
4. Click on Add sign-in method.
5. Choose Passkey from the list.
6. Click Next on "Sign in faster with your face, fingerprint, or PIN" screen.
7. Click Change link on "Save your passkey" screen.
8. Click on Security key. You will be prompted to plug your security key into the USB port.
9. You will be asked to create security key PIN, then to push the button or touch the sensor on your security key twice to finish setting up your device. 
10. You will be asked to provide a meaningful name for your key to identify it easily. Type it in and click Next.
11. Click Done to complete the process.
12. Test the security key to confirm it can be used to authenticate successfully. 

The next time you are asked to authenticate you will be directed to insert your security key.