Deploy passkeys with a registration campaign in Entra ID
With a registration campaign, Entra ID asks eligible users for a passkey after their MFA sign-in. This is how you set up that campaign.
Entra ID
Blog posts on Microsoft Entra ID: Conditional Access, sign-in methods such as passkeys and access to Microsoft 365. Guides and news for administrators.
Conditional Access: require MDM and compliance
Use the Require compliant device template so users sign in to your cloud apps only from an enrolled, compliant device.