GoKawiilMicrosoft sets February 2027 deadline to retire SMS sign-in for Entra ID
Microsoft has told IT administrators to move Entra ID users off SMS and voice-based first-factor sign-in before it shuts the option down in February 2027. Alternatives include passkeys, QR code authentication, and FIDO2 security keys, and the change applies even to organizations using their own telephony providers for multifactor authentication. The retirement covers only workforce tenant scenarios, not customer identity products like Entra External ID.
GoKawiil's interpretation of the reporting above, not reported fact.
SMS and voice authentication remain common targets for phishing and SIM-swapping attacks, so pushing organizations toward phishing-resistant credentials closes a long-standing security gap in enterprise identity systems. The two-year runway gives admins time to plan, but companies that delay risk sudden sign-in failures once the cutoff hits, especially since Microsoft has already begun defaulting users to passkeys automatically.
- SMS and voice first-factor sign-in for Entra ID ends in February 2027.
- Admins should migrate users to passkeys, FIDO2 keys, or QR code authentication now.
- Microsoft is already auto-enrolling SMS/voice MFA users into passkeys as the new default.
Yubico YubiKey 5 NFC — Enhance your organization's security with the Yubico YubiKey 5 NFC, a FIDO2 security key that provides phishing-resistant two-factor authentication. As Microsoft encourages migration to passkeys and other phishing-resistant methods, this hardware token offers a reliable and easy-to-use solution to protect user accounts and ensure seamless sign-in experiences.
See Yubico YubiKey 5 NFC on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-21
Published there as: “Microsoft reminds admins to migrate Entra ID users to passkeys”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.