M365 can use “passkeys” so I enabled the FIDO2 hardware key authentication method in Entra admin. Users can now add their security keys (e.g.: yubikey 5 NFC) as a sign-in method, in account settings. 🪪