To enable passwordless sign-in via the Microsoft Authenticator app for a specific group in Microsoft Entra ID, you must enable the Microsoft Authenticator policy, target your specific group, and configure the authentication mode to passwordless.
Step 1: Sign in to the Microsoft Entra admin center as at least an Authentication Policy Administrator.
Navigate to Authentication Methods
Step 2: Expand the Protection menu on the left navigation bar.
Step 3: Click on Security.
Step 4: Click on Authentication methods.
Step 5: Under the Policies tab, select Microsoft Authenticator from the list of methods.
Enable Microsoft Authenticator Policy
Step 6: Change the Enable toggle to Yes.
Step 7: Under the Target tab, choose Select groups (instead of "All users").
Target Your Specific Group
Step 8: Click Add groups.
Step 9: Search for and select your specific group from the directory list. [Select All Employees] Step 10: Next to your added group, click the three dots (...) or select Configure.
Configure Passwordless Mode
Step 11: Change the Authentication mode drop-down menu from Any or Push to Passwordless.
Step 12: Click Done.
Step 13: Click the Save button at the bottom of the screen to apply the policy changes Save the Policy Reference:
https://huntertech.ca/blog/passwordless-authentication-microsoft-365/