- Microsoft is retiring SMS and voice as MFA methods provided by Microsoft in Entra ID, with complete retirement by February 1, 2027.
- Passkeys will become the default sign-in method starting September 1, 2026, where users enabled for SMS/voice will be auto-enabled for passkeys.
- After February 1, 2027, users with only SMS or voice as MFA will face a blocking prompt to register a passkey, with no opt-out.
- Organizations must find users enabled for SMS/voice in Authentication Methods Policy and identify those relying solely on phone-based MFA.