Microsoft Entra External ID (Product): news timeline & CVEs

Top 10 Best Customer Identity & Access Management (CIAM) Solutions in 2026 [Ranked & Scored]

A 2026 ranking scores ten CIAM platforms, placing Okta Auth0 first ahead of Microsoft Entra External ID and Ping.

Cyber Security News published a research-based 2026 ranking of customer identity and access management platforms. Auth0 by Okta scored 9.2 and ranked first, followed by Microsoft Entra External ID at 8.9 and Ping Identity, including ForgeRock, at 8.8. Amazon Cognito, Transmit Security, Frontegg, SAP Customer Data Cloud, Thales OneWelcome, and LoginRadius completed the list. Weights covered developer experience, passkeys, scale evidence, pricing clarity, and B2B consent, with no lab testing claimed.

Cyber Security NewsSep 22, 07:53 UTC · 5d agoIndustry

Microsoft Entra ID to Block SMS First-Factor Sign-Ins Worldwide in February 2027

Microsoft will block SMS first-factor sign-in for Entra ID workforce tenants worldwide on February 1, 2027.

Microsoft will stop honoring SMS first-factor sign-in, internally called SignInNoPassword, for Microsoft Entra ID workforce tenants on February 1, 2027. Users who authenticate only with a registered phone number and a six-digit SMS code will lose access to Microsoft 365 and other Entra-protected services. The retirement covers worldwide and US Government Community Cloud tenants but not Azure AD B2C or Microsoft Entra External ID. Microsoft cites phishing, SIM swapping, and interception, and recommends passkeys, Windows Hello for Business, FIDO2 keys, or administered QR-code-and-PIN authentication.

Cyber Security Newsupdated Sep 22, 06:31 UTC · 5d agofirst Sep 21, 14:40 UTC · 5d agoAdvisory 3 sources

Microsoft reminds admins to migrate Entra ID users to passkeys

Microsoft reminds admins to migrate Entra ID users to passkeys before SMS first-factor sign-in is retired in February 2027.

Microsoft is reminding administrators to migrate Entra ID users to phishing-resistant authentication methods like passkeys before the February 2027 retirement of SMS first-factor sign-in. SMS sign-in was retired for Free tenants in August due to account compromise risks, and passkeys are now the default authentication experience for new Entra ID users. The retirement applies only to workforce tenant scenarios, not to Azure AD B2C.

BleepingComputerupdated Sep 22, 06:31 UTC · 5d agofirst Sep 21, 13:16 UTC · 5d agoAdvisory 3 sources2

Microsoft Entra External ID

Timeline3 articles

Appears with

Top 10 Best Customer Identity & Access Management (CIAM) Solutions in 2026 [Ranked & Scored]

Microsoft Entra ID to Block SMS First-Factor Sign-Ins Worldwide in February 2027

Microsoft reminds admins to migrate Entra ID users to passkeys