Microsoft Azure lets you restrict which Authenticator Attestation GUIDs (AAGUIDs) that are allowed when enrolling a FIDO2 key. Example for Yubikey https://sup

Microsoft Azure lets you restrict which Authenticator Attestation GUIDs (AAGUIDs) that are allowed when enrolling a FIDO2 key. Example for Yubikey https://support.yubico.com/hc/en-us/articles/360016648959 https://support.yubico.com/hc/en-us/articles/360016648959 So you could technically restrict which FIDO2 key models are allowed at the server level.