TLDR InfoSec · QUICK LINKS
MICROSOFT ENTRA ID ENDING NATIVE SMS AUTHENTICATION, PUSHING USERS TO PASSKEYS
Summary from the TLDR InfoSec newsletter
Microsoft will retire its built-in SMS and voice MFA in Entra ID on February 1, 2027 (July 1, 2027 for Global Administrators and external users), forcing SMS-only users into a blocking passkey registration at sign-in unless their organization purchases a third-party telephony provider through the Microsoft Security Store.