Microsoft Axes SMS Sign-In for Entra ID Workforce Tenants

Microsoft is phasing out SMS-based sign-in for its Entra ID workforce tenants as of February 1, 2027. The decision aims to prevent disruptions and mitigate risks associated with phishing, fraud, and account compromises. Organizations relying on SMS or voice for multi-factor authentication will need to transition users to alternative phishing-resistant methods.

Microsoft is promoting the use of passkeys, QR code authentication, and FIDO2 security keys as secure alternatives. For organizations requiring phone-based authentication, they must configure third-party telecom providers. The retirement does not affect Azure AD B2C or Microsoft Entra External ID customer identity scenarios.