A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Below is the supported way to use the same Microsoft Entra ID (work/school) account with Microsoft Authenticator and passkeys across multiple devices, starting from one already-initialized device.
1. Ensure the account is set up with a passkey in Microsoft Authenticator (per device)
Repeat these steps on each mobile device that should authenticate with the same account.
iOS device
- Open Microsoft Authenticator.
- Tap Add Account or the + button.
- Select Work or school account.
- Tap Sign in and complete MFA as required.
- When prompted, select Open Settings to enable Authenticator as a passkey provider.
- In iOS Settings, go to Passwords > Password Options.
- Turn on Autofill Passwords and Passkeys.
- Under Use Passwords and Passkeys From, select Authenticator.
- Return to Authenticator and select Continue (or Done) to complete registration.
Android device
- Open Microsoft Authenticator.
- Tap Add Account or the + button.
- Select Work or school account.
- Tap Sign in and complete MFA as required.
- On the Android device, open Settings.
- Go to Passwords & Accounts.
- Under Additional providers, enable Authenticator.
- Return to Authenticator and select Done to finish setup.
Perform the above on each of the three devices using the same work/school account. This creates a passkey on each device tied to the same account and enables seamless SSO in Microsoft apps on each device.
2. Use cross-device sign-in from mobile to other devices (if needed)
If one of the three devices is a PC or other device where direct Authenticator installation is not used for sign-in, use cross-device passkey sign-in from the mobile Authenticator device:
- On the target device (for example, Windows 11 23H2 PC), open the Microsoft app or site (such as Office) and start sign-in.
- If prompted, choose Other ways to sign in or Sign-in options, then select Face, fingerprint, PIN, or security key.
- On Windows 11 23H2 or later, select iPhone, iPad, or Android device.
- A QR code appears on the screen.
- On the iOS or Android device that has Authenticator configured for the account, open the system camera app (not the camera inside Authenticator) and scan the QR code.
- When prompted on the phone, select Sign in with passkey.
- Confirm with Face ID, Touch ID, fingerprint, or device PIN.
- The target device is now signed in with the same account.
Repeat this cross-device sign-in process from any of the mobile devices already configured with Authenticator to sign in to the same account on additional devices.
After these steps, all three devices will authenticate using the same account, each with its own local passkey in Microsoft Authenticator and the ability to sign in to Microsoft Entra ID resources.
References: