Browsers supported on macOS EdgeĪzure AD CBA today isn't supported for device-based sign-in to macOS machines.

On macOS, Azure AD CBA is supported on all browsers and on Microsoft first-party applications. Azure AD CBA is supported with certificates on-device and external hardware protected security keys. Azure Active Directory certificate-based authentication on macOS devicesĭevices that run macOS can use CBA to authenticate against Azure AD by using their X.509 client certificate. Apple says the security key provides “extra protection from targeted attacks, such as phishing or social engineering scams.” While a scam website or app might trick you into revealing a six-digit number, getting you to hand over a physical object is much harder.This topic covers Azure Active Directory (Azure AD) certificate-based authentication (CBA) support for macOS and iOS devices. The thinking is that having something physical that stays with you is more secure than a passcode, which can be guessed, brute-forced, or viewed over your shoulder. The security key replaces that second step, the passcode. If you already have 2FA set up on your account, you’re familiar with logging into a new Apple device using your email address and password and then having a six-digit code sent via SMS or to another device (like an iPhone or a Mac) that you're already logged in on. These keys work in tandem with two-factor authentication (2FA), so you still need your password.

It’s a great way to boost your security, and here’s how it works. In other words, a physical device can verify your Apple ID login in place of a passcode. Apple continues to tighten iOS security, and iOS 16.3 (and iPadOS 16.3, and macOS Ventura 13.2) includes support for physical security keys.

Yubikey 5ci iphone