Reviewed by Brian Kinane · SetupPasskeys product author · 27 July 2026

Samsung Pass with Microsoft Entra passkeys

Samsung's current UK support guidance describes a Samsung Pass passkey as stored only on the Galaxy device in encrypted storage. Treat this rollout path as device-bound: a replacement phone needs a fresh registration. Samsung's regional documentation is not fully consistent, so validate the exact Galaxy model, One UI version and Samsung Pass build during the pilot.

What users need

A supported Samsung Galaxy device running One UI 6 or later, a Samsung account, a screen lock and Samsung Pass configured with biometrics. Device and software support should be confirmed during the pilot.

Entra configuration

Enable passkeys (FIDO2) for a pilot group. If the passkey policy restricts authenticators, confirm the provider metadata and AAGUID before adding it to an allow-list. Test the full registration and sign-in path rather than relying on the provider name alone.

Conditional Access

Use an authentication strength that requires phishing-resistant MFA. Create the policy in report-only mode, target all resources, and exclude emergency access accounts before evaluating impact.

User communication

Tell Galaxy users exactly which provider to choose. Some devices may also offer Google Password Manager; unclear instructions can create support calls even when both providers technically work. Tell users to register a new passkey before an old Galaxy is replaced or reset.

Source: Samsung's passkey guidance for Samsung Pass. Because Samsung publishes different wording in some regions, the pilot result is the authority for your supported device baseline.