Microsoft to phase out SMS and voice authentication for Entra ID

Microsoft is transitioning its Entra ID cloud platform toward more secure authentication methods by phasing out SMS and voice call-based multi-factor authentication (MFA).

Starting September 1, 2026, Microsoft will begin the automatic enablement of passkeys for enterprise users who currently rely on SMS or voice calls. This phase will include a registration campaign to encourage users to configure new authentication methods. By February 1, 2027, Microsoft plans to officially end its service for sending authentication SMS and voice calls.

Passkeys, which utilize biometric data such as fingerprints or facial recognition, are intended to reduce vulnerability to phishing and impersonation attacks. Organizations have a temporary window between September 2026 and February 2027 to opt-out of the automatic migration via Microsoft Graph.