<![CDATA[Microsoft reminds admins to migrate Entra ID users to passkeys]]>Microsoft is urging administrators to move Entra ID users onto phishing-resistant authentication methods ahead of a significant change to how sign-ins will work. The company plans to retire SMS first-factor sign-in starting in February 2027, and accounts still relying on text-message codes as their primary credential could face sign-in disruptions once that happens.

The push is part of a broader shift toward stronger, phishing-resistant options such as passkeys, which Microsoft is positioning as the replacement path for organizations still using SMS as a first factor.

Key points for admins:

  • SMS first-factor sign-in is being retired beginning February 2027.
  • Users should be migrated to phishing-resistant methods, with passkeys highlighted as the recommended direction.
  • Failing to migrate before the cutoff risks sign-in disruptions for affected Entra ID accounts.

If your organization still uses SMS as a primary authentication factor for Entra ID, now is the time to inventory those accounts and plan the move to phishing-resistant credentials.

Source: Publication Name

Has your organization already started migrating Entra ID users to passkeys, or are you still working out how to handle accounts that depend on SMS?

]]>https://xploitlk.com/topic/419/microsoft-reminds-admins-to-migrate-entra-id-users-to-passkeysRSS for NodeTue, 27 Oct 2026 08:56:23 GMTTue, 22 Sep 2026 00:30:23 GMT60