Microsoft to End SMS and Voice Authentication for Entra ID in 2027
Microsoft set a February 1, 2027 cutoff for phone-based multi-factor authentication in Entra ID, urging administrators to adopt passkeys or FIDO2 keys.
Microsoft will end SMS and voice authentication for Entra ID on February 1, 2027, according to a Microsoft 365 Message Center notice dated October 27. After the cutoff, users will no longer be able to use SMS or voice for multi-factor authentication and sign-in, as BleepingComputer reported.
The change applies only to Entra ID for enterprise employees. Microsoft said its customer identity services, Azure AD B2C and Entra External ID, are not affected.
Administrators are being told to move users to passkeys, QR code authentication or FIDO2 security keys. Microsoft cited phishing and SIM-swapping risks as reasons to prefer passkeys.
Companies that must keep phone-based authentication will need to connect third-party telecom providers directly through the Microsoft Security Store.
Earlier steps toward passkeys
Since September 2026, Microsoft has been making passkeys the default authentication method for Entra ID. In August 2026, the company stopped free Entra ID customers from using SMS as a primary sign-in method.
Quick answers
When will Microsoft stop SMS and voice authentication for Entra ID?
Microsoft set the end date as February 1, 2027, according to a Microsoft 365 Message Center notice dated October 27.
Does the change affect Azure AD B2C or Entra External ID?
No. Microsoft said the change applies only to Entra ID for enterprise employees, not to Azure AD B2C or Entra External ID.
What should administrators use instead of SMS and voice?
Microsoft is directing administrators to move users to passkeys, QR code authentication or FIDO2 security keys.