Microsoft urges Entra ID admins to migrate users to passkeys
Microsoft will retire SMS and voice MFA for Entra ID in February 2027 — enterprises must plan passkey migration now to avoid sign-in disruptions and meet NIS2/DORA phishing-resistant auth expectations.
Summary written by editorial AI · Source link below
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]
Editorial Analysis
The deprecation deadline creates a hard forcing function for phishing-resistant authentication adoption, directly aligned with NIS2 and DORA requirements — delay increases both security and compliance risk.
Launch a passkey migration programme for all Entra ID users now, inventorying SMS/voice MFA dependencies across applications, pipelines, and user populations.
Microsoft is ending SMS-based login verification for its enterprise identity platform in early 2027 — migration to stronger methods must begin now to avoid disruption and meet EU regulatory expectations.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Security Desk
- Iris Ohyama data cloud breach exposes info of 7.7 million customers1d
- After Binance, check what your signing systems can approve3d
- The Exceptions That Break MFA Start in the Boardroom4d
- DigiCert data breach exposes customer information, identity documents4d
- Why waiting for quantum computers to arrive could leave your security exposed4d