The iPhones used in our company are managed by Microsoft Intune and our users are not logged in to an iCloud account on that devices. Additionaly all iCloud Features are disabled by MDM to avoid the uncontrolled leakage of data.
We now want do adopt FIDO2 for authentication with our Identity provider but it looks like since iOS16 it is no longer possible to register a FIDO2 Credential that resides only on the device. I don't see the option to register the key with the iPhone, only with an external authentication or device using the QR code.
Is this the expected behavior or do I miss something?
Thanks!