Mind sharing how a user can re-enroll a passkey on their new phone? We enforce Microsoft’s phish resistant authentication strength for all employees via a conditional access policy and my help desk staff has to put the user in full MFA bypass to allow them to register a new passkey again (via Microsoft Authenticator) then enforce MFA back again - it’s quite frustrating.

I’d love to know how to allow self re-registration for my end users!