There is an advanced feature that allows iPhone users to sync their accounts to iCloud if they also add a personal Microsoft account to Microsoft Authenticator.Your Microsoft Authenticator accounts are not backed up or transferable to another device.Only one Microsoft work/school account per Microsoft Authenticator can have Phone Sign-In enabled.This limitation is on Microsoft's roadmap to fix, and CIT will update this document once the fix implemented.You will no longer be able to approve logins with your Apple Watch.

More details on this can be found at Microsoft's page for Azure AD Registered Devices. It does not allow CIT to remotely access or wipe your device. This makes it possible for CIT to enforce certain security settings on your device. This method requires device registration, which establishes a trust relationship between your mobile device and CIT's Microsoft systems.After submitting your email address, you will be asked to approve the sign-in and enter a specific number in Microsoft Authenticator. This is an evolution of the push notification method in Microsoft Authenticator. You can still authenticate with your password + MFA method by clicking Other ways to sign in when prompted for your passwordless method.After authenticating with a Passwordless method, Microsoft will make that your default authentication (overriding your default method on your Security Info page).These new methods are configured on your Microsoft 365 Security Info page.

These methods require either the Microsoft Authenticator mobile app, or a FIDO2-compatible security key such as a Yubikey Security Key Series.

Geneseo users can add new authentication methods to their Microsoft 365 accounts that satisfy both the primary (password) and secondary (multi-factor) requirements, effectively reducing the number of steps to log in to Microsoft 365.

Microsoft passwordless account