General Motors’ rollout of passkeys to roughly 200,000 employees shows that the difficult part is not enabling FIDO2 authentication—it is replacing every weak-method dependency around it. With Microsoft Entra ID set to make passkeys the default on September 1, 2026, and retire Microsoft-provided SMS and voice MFA on February 1, 2027, GM’s experience offers administrators a practical migration plan for onboarding, guests, factory workers, unmanaged devices, and VDI users.
Source