Microsoft Entra ID to Block SMS First-Factor Sign-Ins Worldwide in February 2027
Microsoft will block SMS first-factor sign-in for Entra ID workforce tenants worldwide on February 1, 2027.
Microsoft will stop honoring SMS first-factor sign-in, internally called SignInNoPassword, for Microsoft Entra ID workforce tenants on February 1, 2027. Users who authenticate only with a registered phone number and a six-digit SMS code will lose access to Microsoft 365 and other Entra-protected services. The retirement covers worldwide and US Government Community Cloud tenants but not Azure AD B2C or Microsoft Entra External ID. Microsoft cites phishing, SIM swapping, and interception, and recommends passkeys, Windows Hello for Business, FIDO2 keys, or administered QR-code-and-PIN authentication.
- Entra ID blocks phone number plus SMS OTP as the primary factor from February 1, 2027.
- Applies to worldwide and US Government Community Cloud workforce tenants, not B2C or External ID.
- Accounts that rely only on SMS first-factor sign-in will fail after enforcement.
- Microsoft urges passkeys, Windows Hello for Business, FIDO2 keys, or QR code plus PIN.
- Third-party telephony may still send SMS for multifactor use, not first-factor sign-in.
- Vendors
- Microsoft
- Products
- Microsoft Entra IDMicrosoft 365Windows Hello for BusinessAzure AD B2CMicrosoft Entra External ID
- Organizations
- Microsoft
- Countries
- United States
From the original article
3 min read at cybersecuritynews.com
Microsoft is retiring SMS first-factor sign-in for Microsoft Entra ID workforce tenants worldwide and requires organizations to migrate affected users before February 1, 2027. The security-focused change will prevent employees from using a registered telephone number and SMS one-time passcode as their primary sign-in method, potentially disrupting Microsoft 365 and other Entra-protected services if administrators […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.