Microsoft reminds admins to migrate Entra ID users to passkeys
-
Microsoft is urging administrators to move Entra ID users onto phishing-resistant authentication methods ahead of a significant change to how sign-ins will work. The company plans to retire SMS first-factor sign-in starting in February 2027, and accounts still relying on text-message codes as their primary credential could face sign-in disruptions once that happens.
The push is part of a broader shift toward stronger, phishing-resistant options such as passkeys, which Microsoft is positioning as the replacement path for organizations still using SMS as a first factor.
Key points for admins:
- SMS first-factor sign-in is being retired beginning February 2027.
- Users should be migrated to phishing-resistant methods, with passkeys highlighted as the recommended direction.
- Failing to migrate before the cutoff risks sign-in disruptions for affected Entra ID accounts.
If your organization still uses SMS as a primary authentication factor for Entra ID, now is the time to inventory those accounts and plan the move to phishing-resistant credentials.
Source: Publication Name
Has your organization already started migrating Entra ID users to passkeys, or are you still working out how to handle accounts that depend on SMS?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login