Microsoft Security | Microsoft Entra | Other
Additional Microsoft Entra services and features related to identity, access, and network security
Applying a Feitian FIDO2 Key to a Breakglass account in Entra
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 19%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKG%3C/text%3E%3C/svg%3E)
Keith Glanville
0
Reputation points
What is the correct procedure for applying a Feitian FIDO2 Key to a Breakglass account in Entra?
We are moving away from on prem AD to a hybrid Entra solution (with P1 licensing) but can't seem to satisfy the MFA requirements for the emergency breakglass account.
You need MFA already enabled before your can add the key. Even if we temporarily enable SMS to do this, it ends in an error saying that your identity cannot be validated (I forget the exact wording). The result is that the key does not get added.
Any advice welcome. Thanks.
Microsoft Security | Microsoft Entra | Other
Sign in to answer