Intune, Conditional Access and passkeys for a Swiss software company

Starting point

Password-only sign-in was no longer enough: phishing is one of the most common routes to compromised accounts, and device management was not consistent enough to reliably harden the fleet and keep it up to date.

Approach

WORXSPACE migrated device management to Microsoft Intune and hardened devices with a consistent security baseline. Identity was modernised on Microsoft Entra ID, with Conditional Access and phishing-resistant sign-in by FIDO2 passkey instead of passwords. The hardened, centrally managed workplace exists today alongside the same company's Microsoft 365 Copilot rollout (see the Copilot case study).

Result

• Phishing-resistant sign-in by FIDO2 passkey instead of passwords
• Devices centrally managed and consistently hardened through Microsoft Intune
• A security baseline that supports the company's AI adoption instead of blocking it