Yubico FIDO Pre-reg with Microsoft

Integration Guide

• Introduction
• About FIDO Pre-reg with Microsoft
  • Process Flow
  • Customer Orchestration
  • Yubico FIDO Connector App
  • Yubico FIDO Pre-reg API
  • Security Features
    • Microsoft Entra ID Access
    • Pre-Registered Credentials
    • PIN Provisioning
    • Transport Encryption
• Integration Procedure
  • Prerequisites
  • Integration Steps
• Configuring Azure Permissions
  • Creating a Resource Group
  • Adding a Custom Role
  • Assigning an Email License
• Configuring Microsoft Entra ID
  • Enabling Passkey (FIDO2) Authentication
  • Registering Apps
    • Yubico FIDO Connector App
    • Yubico FIDO Pre-reg Test Client
• Deploying to Azure
  • Prerequisites
  • Deployment Steps
    • Deploying ARM Template
    • Modifying Private Endpoints
    • Configuring Container App
    • Granting Container App Permissions
    • Granting Logic App Permissions
    • Authorizing Office 365 Usage
• Testing the Deployment
  • Troubleshooting
    • Where to Start?
    • Verifying Shipment Status in Storage Browser
    • Verifying Delivery Status of YubiKey PIN
    • Verifying YubiKey Registration in Microsoft Entra ID
    • Checking Microsoft Entra ID Audit Log History
    • Checking FIDO Connector Logs
• Creating Shipment Requests
• Post-deployment Operations
  • Additional Runtime Environment Parameters
  • Configuring Key Vault and Storage Permissions
  • Rotating API Tokens
  • Rotating Application Client Secrets
  • Changing Microsoft 365 Email Account
  • Resending PIN Email
• API Reference
  • Check Deployment Component Status
  • Create Shipment Request
  • Get Shipment Request Status
  • Resend PIN
  • Process Shipments
• Release Notes - FIDO Connector
  • Release 1.1.4 (22 August 2025)
  • Release 1.1.1 (25 June 2025)
  • Release 1.0.0 (3 April 2025)
• Copyright
  • Trademarks
  • Disclaimer
  • Contact Information
  • Document Updated