Microsoft tells Entra ID admins to leave SMS and voice before 2027
Original title: Microsoft urges Entra ID admins to migrate users to passkeys
Microsoft-provided SMS and voice MFA end February 1, 2027 for workforce tenants, not Azure AD B2C or Entra External ID.
Microsoft again told Entra ID administrators to move users to phishing-resistant sign-in before it retires Microsoft-provided SMS and voice authentication. The retirement covers workforce tenants only. Passkeys are rolling out as the default, and users still on SMS or voice are prompted to register one. Organizations that must keep phone authentication can use a customer-managed telecom provider.
- Microsoft-provided SMS and voice authentication retire starting February 1, 2027.
- The Entra SMS/Voice Policy Scanner PowerShell script can find remaining phone users.
- Supported options include passkeys, QR code authentication, and FIDO2 security keys.
- SMS first-factor sign-in for Entra ID Free tenants was retired in August.
Impact: Users may be unable to complete MFA and sign in
| Product | Affected |
|---|---|
| Microsoft Entra ID | workforce tenants using Microsoft-provided SMS and voice |
- 1.Migrate users to passkeys or another supported method before February 1, 2027.
- 2.Find SMS or voice users with the Entra SMS/Voice Policy Scanner PowerShell script.
- 3.Configure a customer-managed telecom provider if phone authentication must remain.
- Vendors
- Microsoft
From the original article
2 min read at bleepingcomputer.comMicrosoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.