Skip to main content

Passwordless with Enterprise Passkey

Pairing a HYPR Enterprise Passkey​

Pairing a workstation to a HYPR Enterprise Passkey will add the user to an Entra group (HYPR Group (Client Paired with HYPR)) that indicates they still need to pair their passkeys with Entra. Administrators may wish to use this group for policy changes or email reminders to complete pairing.

Take Only One

The HYPR Mobile App supports only one Entra passkey credential per device. You may still register other FIDO2 passkeys to the account; just not another Entra Passkey.

Pairing with HYPR on a Domain-joined Workstation​

  1. Login to Windows as an Entra cloud-only or hybrid account (i.e., carol.shaw@highlands_entra.com).

  2. Launch the HYPR Passwordless client.

  3. Click Start Pairing.

  4. The HYPR Passwordless client reminds you to open Microsoft Entra ID and pair your phone as a security key after pairing with HYPR. Click Continue.

  5. Scan the QR code on the screen. You will be prompted to authenticate on your device.

  6. Once you are paired successfully, click Continue.

  7. Be patient while the pairing is established.

  8. HYPR Passwordless client returns to the main screen, now displaying your paired device. The device’s HYPR Mobile App menu now contains your workstation account in the My Computers Keys section.

Invitation Emails​

Unlike other integrations' enrollment processes, HYPR Enterprise Passkey does not send invited users a link to pair with Device Manager. Instead, the email is informational only, and the link provided connects to this article.

Logging In with HYPR Enterprise Passkey​

Logging In to Windows​

The experience for logging into your desktop with HYPR Enterprise Passkey is the same than for the entire HYPR Mobile Application experience.

See Tap to Login and Unlocking/Locking for the full step-by-step guide.

Logging In to Entra Protected Content (Like O365.com)​

  1. Login with the paired user account in Chrome to ensure you get a login prompt (Edge will use SSO).

  2. You may get the default login screen with password or you may just get the FIDO2 prompt. It all depends on the browser and what Microsoft has recorded. If you see the password prompt, select Other ways to sign in.

  3. Select Use Windows Hello or a security key.

  4. Open the HYPR Mobile App and select Security key.

  5. Go through the motions for FIDO UP and User Verification (UV), and you are now in Microsoft Office.