Supported device types include USB, near-field communication ( NFC), and bluetooth low energy ( BLE). Microsoft accounts are created by consumers for services such as Xbox, Skype, or. This table shows support for authenticating Azure Active Directory (Azure AD) and Microsoft Accounts (MSA). The following diagram shows which browsers and operating system combinations support passwordless authentication using FIDO2 authentication keys with Azure Active Directory. The availability of FIDO2 authentication for Microsoft accounts was announced in 2018, and it became generally available in March 2021. In my settings the only types of two-step verification are a security key (primary) and a authentication app (backup).Azure Active Directory allows FIDO2 security keys to be used as a passwordless device. Logged in again this morning and it sends me an SMS code and wants me to authenticate using this. Anyway very odd that after disabling SMS 2FA, Paypal appears to continue to use it as an authentication for some unspecified period. If I log back in there is no request to enter an SMS code. Updated: several hours later and everything appears to work as one would expect. It wasn't just once.Ĭorrection: There were other options 'login with user name and password' and if you clicked that you ended up getting asked for the security key.

Like WTAF! I disabled SMS but it's not disabled?! And it's being used as the primary and only login for relogins?

I request a resend and this time the code works and it logs me back in. I logout and log back in again and it asks me to authenticate using SMS (no other options). I login with my username and password and Paypal asks me to authenticate using the security key. So as described above, I setup a FIDO key and disabled SMS MFA.

The whole situation is actually completely messed up.

Fido 2 key