@sahulkko

Thank you for the feedback, I've passed it along to the team. 🙂

-Dave

ref: PB-37810805

Yes, that is how it goes. Icon is vague on top corner and there should be clear selection list of targets to save passkey.

@sahulkko

Just to clarify, to dismiss the prompt and use your security key instead, you can click on the following:

Let me know if that doesn't work. 🙂

-Dave

If you close 1password popup window in the Microsoft Entra environment the process of adding physical security key fails with unknown reason notation.
One can save passkey to physical key with top right corner icon and selecting the physical security key to be the target of passkey.

@sahulkko
If a passkey is to be used or is to be created, the 1Password browser extension is detecting this, a corresponding window is popping up and you can handle the action within 1Password. You also have the choice of just closing this 1Password window. In this case, the default passkey handling from browser/operating system kicks in and you again have the choice to handle that action with their functionality.

Initiating passkey and physical key creation is the same on some websites, for example for private Microsoft accounts as above. At least it was the same at the time of writing. So 1Password pops up for that request, because it doesn't know if you intend to create a passkey or a physical key. You need to dismiss its dialog to get to the operating system dialog, which enables you to use the physical key.

I would like to know how one is then able to add physical security key if passkey by 1password is:

"Following Tertius steps, 1Password in the browser should intercept the request and allow you to add the passkey."

Intercepting the process of adding physical security key? Like turn off 1password plugin and add physical security key? Touch your nose and go around birch few times approach?

In plugin there is icon to choose where to save the passkey in top right corner though it is vague. From there one can choose to save it to physical key.

I removed sign with passwordless and 2FA.

Now I am signing using a password and did the passkey setup. this works properly.

*## A question for experts here. since this is one of my important accounts. *

Can i add additional layer of security here which MS provides like 2fa ?
With password less it seems this is not working.

Tried to signin and this is first option given:
Selected signin with Hello or Security key.

As mentioned above by Tertius, I had setup the passkey with no physical device and I get the above option, which is forcing to select a key (which was never there)

At present i have Microsoft Autheticator working as well for sign-in option (notification to approve logins is send to my android device)
This is the way I logged in..

Should i keep only once MS Authenticator or PAsskey ?
Passkey created with no physical device is not working in my case.

Hi HNofX82,

Thanks for the screenshots here! It appears that a passkey was not added to that login, rather the Sign in with Microsoft option causing the passkey Watchtower banner to continue to appear on that item.

Following Tertius steps, 1Password in the browser should intercept the request and allow you to add the passkey. I've included an example and steps below from my personal Hotmail account:

1. From the Microsoft Security page select, + Add a new way to sign in or verify.
2. Select Use a security key.
3. Click Next.
4. 1Password in the browser should appear as below with the option to update your item with the passkey:

1. Click Save, to update the item.
2. Enter a name for the key.

I hope this helps, but please let us know if you have any further questions.

But now, i can additionally see a Microsoft logo appears with text sign in with..