Docs

Conditional Access

View as MarkdownThe page as plain text Open in ClaudeAsk questions about this page Open in ChatGPTAsk questions about this page

Require Approved or Protected App Policy

If you have a conditional access policy that always require compliant device, you will run into issues where the user cannot register a passkey during onboarding.

If you have a conditional access policy that always require compliant device, you will run into issues where the user cannot register a passkey during onboarding.

To work around this issue, Microsoft has documented some methods.

Tip

CheckID supports the Allow the exemption for only a limited period of time workaround through the Onboarding Group feature.

Last updated 2 November 2026 Edit this page on GitHub
Esc