EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Sep 2·5 min read
A Beginner's Deep Dive Guide to Entra Passkeys
TL;DR
Microsoft Entra now fully supports passkeys, a secure and phishing-resistant alternative to traditional passwords. This guide details how to implement and manage passkeys for enhanced authentication.
✦ Why It Matters
Start implementing passkeys in your organization to enhance security and reduce phishing risks today.
Key Takeaways
- Implement passkeys to enhance security against phishing attacks.
- Configure Device Bound and Synced passkeys in Entra for users.
- Educate users on creating and managing passkeys effectively.
- Pilot passkey implementation with a small user group first.
How It Works
When a user registers a passkey, a key pair is created: a private key stored securely on the device and a public key in Entra ID. During login, a challenge is issued, requiring user verification through biometrics or a PIN.
The device signs the challenge with the private key, and Entra verifies the signature against the public key, confirming the user's identity.