FIDO Pre-reg with Microsoft

Integration Guide

• Introduction
  • Pre-enrollment Options
• How it Works
  • Process Flow
  • Customer Environment
  • FIDO Connector
  • FIDO Pre-reg API
  • Security Features
    • Microsoft Entra ID Access
    • Pre-enrolled Credentials
    • PIN Provisioning
    • Transport Encryption
• Integration Procedure
  • API Versions
  • Prerequisites
  • Integration Steps
• Configuring Azure Permissions
  • Creating a Resource Group
  • Adding a Custom Role
  • Assigning an Email License
• Configuring Microsoft Entra ID
  • Enabling Passkey (FIDO2) Authentication
  • Registering Apps
    • FIDO Connector
    • FIDO Pre-reg Test Client
• Deploying to Azure
  • Creating an API Token
  • Deploying the ARM Template
  • Configuring Container App Permissions
  • Configuring Logic App Permissions
  • Authorizing Logic App Office 365 Usage
  • Configuring Environment Variables
• Testing the Deployment
  • Troubleshooting
    • Where to Start?
    • Verifying Shipment Status in Storage Browser
    • Verifying Delivery Status of YubiKey PIN
    • Verifying YubiKey Registration in Microsoft Entra ID
    • Checking Microsoft Entra ID Audit Log History
    • Checking FIDO Connector Logs
• Requesting Credentials and Shipments
  • Initial Authentication
• Managing Credentials and Shipments
  • Credential Requests
  • Shipment Requests
• Post-deployment Operations
  • Configuring Environment Variables
  • Configuring Key Vault and Storage Permissions
  • Rotating API Tokens
  • Rotating Application Client Secrets
  • Changing Microsoft 365 Email Account
  • Resending PIN Email
• API Reference
• Release Notes
• Copyright
  • Trademarks
  • Disclaimer
  • Contact Information
  • Getting Help
  • Feedback
  • Document Updated