Microsoft Authenticator on Windows 10: A Step Towards Password-Less Authentication

The World Wide Web Consortium (W3C) has been working on the WebAuthn web authentication standard, which forms the core of FIDO2. FIDO2 is a composite standard consisting of two main components - WebAuthn and CTAP2. The FIDO2 authentication standard is the result of years of collaborative effort between the Fast IDentity Online Alliance (FIDO Alliance) and the W3C to eliminate passwords, which remain one of the biggest vectors for compromise in both personal and corporate lives.

So, what is FIDO2? In simple terms, it's an open authentication standard for both consumer services and enterprises. This capability was recently made available to all Azure AD customers as part of a Public Preview in July 2019. As companies continue to migrate towards access management solutions, FIDO2 stands out as a non-proprietary method that can be used with other identity providers (IdPs), non-Microsoft environments, and many consumer web services.

The future state of password-less authentication for Microsoft Windows enterprise environments will likely involve a combination of three options: Microsoft Authenticator, biometric authentication, and other security protocols. The Microsoft Authenticator app, available on Windows 10, is an essential part of this ecosystem. By using FIDO2 and the Microsoft Authenticator, organizations can provide all-around security to their users while reducing the risk associated with password-based login systems.

The collaboration between Microsoft and the W3C has paved the way for a more secure and convenient authentication experience. The efforts of Principal PM Manager at Microsoft, Swaroop Krishnamurthy, and Senior Program Manager, Cloud Authentication Team at Microsoft, Libby Brown, have been instrumental in shaping this technology. As we move towards a password-less future, FIDO2 and the Microsoft Authenticator will play crucial roles in protecting our digital identities.

Microsoft authenticator windows10