
- Experts warn FIDO is not supported on certain clients when accessing Entra ID
- This triggers a fallback login mechanism that can be picked up
- Mitigations should be put in place, researchers say
FIDO-based authenticator apps are considered one of the strongest practical defenses against phishing and credential theft, but judging by Proofpoint’s latest research, it is not without its weaknesses.