Microsoft will retire Entra ID SMS and voice sign-in in February 2027
Original title: Microsoft to Disable SMS and Voice Authentication in Entra ID Starting February 2027
Worldwide and GCC tenants must move telephone-only users to passkeys or another provider before February 1, 2027.
Microsoft will start retiring its own SMS and voice authentication in Entra ID on February 1, 2027, with rollout expected to finish in early February. Message Center notice MC1528000, dated October 27, cites phishing and SIM-swap risk and points administrators to passkeys. Users who already have another method keep it; telephone-only accounts get one last phone check, then must register a passkey. Organizations that still need phone delivery can use Choose Your Own Telephony Provider, with configuration available from October 30, 2026.
- Treat February 1, 2027, as the deadline rather than a per-tenant date.
- The change covers Microsoft-provided delivery, not every SMS or voice setup.
- Existing customer-managed telecom configurations are unaffected.
- CYOT configuration becomes available beginning October 30, 2026.
- Microsoft warns that migration emails have been used in passkey-enrollment phishing.
Impact: Telephone-only users can be locked out after one final phone check
| Product | Affected |
|---|---|
| Microsoft Entra ID SMS and voice authentication | Microsoft-provided SMS and voice in Worldwide and GCC |
- 1.Inventory telephone-only Entra ID accounts and register passkeys before February 1, 2027.
- 2.Configure Choose Your Own Telephony Provider if phone authentication must remain.
- 3.Warn users to enroll passkeys only through trusted channels, not migration phishing.
- ATT&CK
- T1566 Phishing
- Vendors
- Microsoft
- Products
- Microsoft Entra ID
From the original article
2 min read at gbhackers.com
Microsoft will begin retiring Microsoft-provided SMS and voice authentication in Microsoft Entra ID on February 1, 2027, requiring affected organizations to migrate users or arrange alternative telecom delivery before enforcement starts. The change covers Worldwide and Government Community Cloud (GCC) environments, with rollout expected to finish in early February. Administrators should treat February 1 as […]
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.