> My work uses Microsoft SSO for everything. Passkeys aren't enabled though. And management won't enable them on Azure AD. I don't think they're actually avail

> My work uses Microsoft SSO for everything. Passkeys aren't enabled though. And management won't enable them on Azure AD. I don't think they're actually available on AzureAD. That thing tends to lag like crazy in actual security features. FIDO support is relatively newish. IIRC it was generally available around the end of 2022. Only recently, you no longer have to register a phone number for password reset (which is different from login, mind (SSPR)). > they enable the tried and tested and ultra secure method of SMS based 2FA with a password This isn't actually that much worse than the MS recommended way of using their crappy authenticator. They even allow passwordless sign-in with that thing! The prompt doesn't tell you anything useful apart from "login with <account>?". Now, at least, they prompt you for a number you see on screen. It doesn't help with phishing, but at least you know the request comes from what you're doing, not someone else, since it also tended to drop any request if another one was pending.