FIDO2 security keys in Azure AD Conditional Access: Acceptance in OAuth 2.0 Authorization Code flow with PKCE remains undefined
Goal Determine whether a registered FIDO2 security key can be used as the MFA factor for a client application that initiates an OAuth 2.0 Authorization Code flow with PKCE against Azure AD. Constraints & Uncertainty Azure AD Conditional Access must be enabled for FIDO2, the key must be registered in the tenant, and the application must request the approp