Microsoft has recently updated its Entra ID authentication system to support passkeys. Since September 1, 2026, Microsoft may automatically offer these authentication methods to users.
This change is related to Microsoft and does not originate from the Letsignit application.
Why does this window appear in Letsignit?
The window appears during the Letsignit application’s SSO sign-in process.
Depending on the device and browser, users may see:
a request to insert a USB security key;
a window offering a choice between an iPhone, iPad or Android device and a security key.
Both screens correspond to the same new Microsoft authentication flow.
What should I do to sign in?
Click the “Cancel” button.
This closes the passkey request and allows you to return to the usual sign-in process. You can then authenticate as before, using your company’s standard SSO process and your usual authentication method.
Do I need to use a USB key or my phone?
No, unless your company has specifically asked you to use a security key or a mobile passkey.
What should the IT administrator check to prevent this request from appearing?
To prevent this request from appearing automatically, the Microsoft Entra ID administrator should check the following settings:
Disable the registration campaign: Microsoft Entra ID > Authentication methods > Registration campaign > State: Disabled
Check the System-preferred authentication setting and disable it or exclude the affected users. This setting can generally be found under: Microsoft Entra ID > Authentication methods > Settings.
Check the Passkey (FIDO2) policy and make sure that it is not mandatory for users of the Letsignit application.
Check the Conditional Access and Authentication Strength policies to ensure that no policy requires a passkey or security key for Letsignit.
If necessary, remove a passkey already registered for the user: Microsoft Entra ID > Users > select the user > Authentication methods
The IT administrator should not disable MFA globally. Only the settings related to passkeys should be adjusted in order to restore the usual SSO sign-in process.
Microsoft sources:
Passkeys by default and retirement of Microsoft-provided SMS and voice authentication:
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirementRun a registration campaign to set up a passkey or Microsoft Authenticator:
https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-mfa-registration-campaignSystem-preferred authentication:
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-system-preferred-authenticationHow to enable passkeys (FIDO2) in Microsoft Entra ID:
https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-passkeys-fido2
#LetsignitApplication #LetsignitLogin #LetsignitSSO #MicrosoftSSO #MicrosoftEntraID #LetsignitAuthentication #Passkey #FIDO2 #authentication