Add Improved Support For Passkeys

Is your feature request related to a problem? Please describe the problem.

Right now you can use WAM to somewhat hackily authenticate with WHfB... However, it you need to use a different account (like a Service Admin account) that has different privileges than your primary account, the experience is lacking as you essentially have to sideload into a Windows session with WAM and go through several prompts just to get the passkey QR code.

Describe the solution you'd like.

I'd like to see the delegated auth browser support WHfB and Passkey prompts, especially if it is based on webview2. Also, given that it shares Chromium engine components, I'd like to see a configuration option to share browser cache with both Chrome and Edge (even if the user has to provide the path).

Therefore for example if you already used a Passkey to sign into Intune, you should be able to use that to sign into the same account with Graph and request a token.

Additional context?

No response

Start by reviewing the delegated auth browser flow and how WAM is currently used for WHfB authentication. Investigate WebView2, passkey prompts, and the requested Chrome and Edge cache sharing, then define the supported behavior and validation criteria for signing into Intune and Graph with the same passkey.