Choosing an Entra authentication method

This sheet compares Passkey (Authenticator), Certificate-based auth, Windows Hello for Business, Temporary Access Pass, Email OTP.

CriterionPasskey (Authenticator)Certificate-based authWindows Hello for BusinessTemporary Access PassEmail OTP
Primary factorYesYesVia passkey step-upYesNo, SSPR only

The verdict, the full comparison, 6 rules and 4 traps are part of SC-300 access. Unlock SC-300.