Are you prioritizing passwordless access right now? If so, what are the main reasons behind the initiative, and what's the biggest challenge you've faced?

We haven't gone to completely passwordless authentication, however for some systems we use it as an extra MFA verification. That is, you have something that you had before and still have and have the ability to access it because you know the unlock pin / faceID / fingerprint for that device. This is easier to use than a MFA OTP but doesn't completely replace the need for a password. Without them, its a single point of failure. When the security of our infrastructure and customers data is at stake, we need more, not less. For non-privileged accounts where the damage is minimal then yes. Long term we can move to it, but we are still going to insist on multiple authentication, even if each one is passwordless for many situations.

Thanks Yorick, this question came up as a few CIOs we're working with were wondering about the benefits of doing so relative to the traditional approach.  can share more.

If your apps support SAML, SSO with Azure + Microsoft Authenticator will deliver Passwordless authentication natively. We use it already, works fine.

Interesting point about not prioritizing based on where we're at now. Do you have a time-frame in mind for when passwordless might be ready for prime time adoption? 2021 or longer term?

Not really.   Given the priorities of the business and all the things that we have to do to enable those, I can't imagine us even really thinking about this until 2nd half of 2021, and then it would be more checking in to see what is the state of technology then and the ease of integrating it with our existing solutions.