Microsoft Entra ID: Reminder to migrate from Microsoft-provided SMS and voice authentication

[What and why]

This is a reminder of the upcoming retirement of Microsoft-provided SMS and voice authentication in Microsoft Entra ID, previously announced in MC1426371 (July 13, 2026) and MC1434201 (GCC, July 20, 2026).

Microsoft-provided SMS and voice authentication will retire starting February 1, 2027. Complete your migration before rollout begins to avoid interrupting users' sign-in experience.

SMS and voice are vulnerable to phishing and SIM-swap attacks. Microsoft recommends passkeys for stronger, phishing-resistant protection. You can also migrate to another supported authentication method or retain SMS and voice by configuring a customer-managed telecom provider (CYOT) through the Microsoft Security Store.

[Rollout schedule]

• Retirement (Worldwide and GCC): Beginning February 1, 2027, and expected to complete in early February 2027.
• Complete migration or configure CYOT before February 1, 2027, rather than waiting for the rollout to reach your tenant.

[Impact on your organization]

Who is affected

• Organizations and users that rely on Microsoft-provided SMS or voice authentication
• Customer-managed telecom providers configured through the Microsoft Security Store are not affected.

Platforms and services

• Microsoft Entra ID authentication

What will happen

• Users with another registered sign-in method will use that method. They will not be required to register a passkey to continue signing in.
• Users whose only registered sign-in method is SMS or voice can use SMS or voice one final time to verify their identity. They must then register a passkey before continuing sign-in.

[Action required and recommendations]

If your organization uses Microsoft-provided SMS or voice, complete these steps before February 1, 2027:

• Identify affected users. Review who relies on SMS or voice, especially users with no other registered sign-in method.
• Complete migration. Help affected users register and start using passkeys or another supported authentication method before rollout begins.
• Configure CYOT if you need to retain SMS or voice. Configure a customer-managed telecom provider through the Microsoft Security Store before rollout begins.
• Notify users and your helpdesk. Explain the deadline, required actions, and the passkey-registration requirement for users who only have SMS or voice registered.

If your organization does not use Microsoft-provided SMS or voice, no action is required for this retirement.

Learn more

• Migration guidance
• Passkeys in Microsoft Entra ID
• Choose a telephony provider for SMS and voice authentication - Microsoft Entra ID | Microsoft Learn

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.