ID-07: Passkey Adoption Coverage

ID-07 is a security control that passkeys provide phishing-resistant authentication for all users. high adoption rates reduce organizational vulnerability to credential theft attacks. microsoft and industry standards increasingly recommend passkeys as the primary authentication method. It requires that more than 50% of users have registered passkey methods and passkeys are enabled in authentication methods policy, registration campaign is active for remaining users.

Passkeys provide phishing-resistant authentication for all users. High adoption rates reduce organizational vulnerability to credential theft attacks. Microsoft and industry standards increasingly recommend passkeys as the primary authentication method.

ID-07 requires manual implementation. Users must register passkeys themselves. Use MFA registration campaign to drive adoption.

This control can be implemented with any Microsoft 365 subscription, including free Azure AD.

ID-07 is included in the Enhanced Security baseline (Level 2). This level adds stricter controls for security-conscious organizations.