-
Log into Microsoft Entra at https://entra.microsoft.com/
-
Sign into the administrator account. Creds can be found in password state
-
Go to Users > All users > Search for the specific user > Click on their name
- Go to Groups > Click Add membership
- Search for Personal Devices Allowed > Select the “Personal_Devices_Allowed” group > Add it to the user
-
After they have been added group ask the user to try and sign in
-
When the user is trying to authenticate via MFA, make sure they are using a different method other than yubikey (e.g. SMS, Okta Verify, etc)
-
Yubikeys do not work on phones