GoKawiilMicrosoft sets February 2027 end date for SMS, voice sign-in on Entra ID
Microsoft has repeated its call for Entra ID administrators to move workforce tenant users off SMS and voice-based authentication before it discontinues Microsoft-provided versions of these methods on February 1, 2027. The change affects only Entra ID workforce tenants, not Azure AD B2C or Entra External ID customer scenarios, and admins can shift users to passkeys, QR code sign-in, FIDO2 keys or other supported options, or keep phone-based login by configuring a third-party telecom provider.
GoKawiil's interpretation of the reporting above, not reported fact.
The move reflects Microsoft's stated view that SMS and voice codes are weak against phishing and SIM-swap attacks, pushing enterprises toward passkeys as the new default. Organizations that delay migration risk users being locked out once the retirement rolls out, making early use of tools like the Entra SMS/Voice Policy Scanner important for identifying at-risk accounts.
- Microsoft-provided SMS and voice authentication for Entra ID workforce tenants retires February 1, 2027.
- Admins can migrate users to passkeys, QR codes, FIDO2 keys, or other phishing-resistant methods, or configure a third-party telecom provider.
- Passkeys became the default Entra ID authentication experience starting in September, following Microsoft's July announcement.
YubiKey 5C NFC Security Key — Since Microsoft is pushing Entra ID users toward phishing-resistant authentication, a FIDO2 hardware key like the YubiKey 5C NFC is a perfect fit. It supports passkeys and FIDO2 login natively, letting admins and users sidestep vulnerable SMS and voice codes entirely while meeting Microsoft's 2027 deadline with confidence.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-28
Published there as: “Microsoft urges Entra ID admins to migrate users to passkeys”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.