Entra Id - GoKawiil

Microsoft to enforce stricter script policy on Entra ID sign-ins from mid-October 2026

Microsoft confirmed it will begin enforcing a Content Security Policy on Entra ID sign-in pages starting mid-October 2026, allowing only scripts hosted on trusted Microsoft CDN domains to run during authentication. The rollout, first announced in November 2025, is expected to complete by late October 2026 and applies automatically without tenant configuration.

bleepingcomputer.com · 2026-09-30

Microsoft sets February 2027 deadline to retire SMS sign-in for Entra ID

Microsoft has told IT administrators to move Entra ID users off SMS and voice-based first-factor sign-in before it shuts the option down in February 2027. Alternatives include passkeys, QR code authentication, and FIDO2 security keys, and the change applies even to organizations using their own telephony providers for multifactor authentication. The retirement covers only workforce tenant scenarios, not customer identity products like Entra External ID.

bleepingcomputer.com · 2026-09-21