Microsoft Urges Entra ID Users to Migrate to Passkeys Before 2027 Deadline

Microsoft is urging organizations using Entra ID to accelerate the migration from SMS and voice-based authentication to passkeys. The company plans to retire its native telecommunications-based verification services in 2027, starting with most users on February 1, 2027. Global Administrators and external users will have until July 1, 2027, while internal guest users must comply by the earlier deadline.

The transition began on September 1, 2026, when Microsoft automatically enabled passkeys for users configured for SMS or voice authentication. These users are now part of a Microsoft-managed registration campaign, but they can still postpone the registration prompt. Administrators must actively monitor adoption to ensure all users complete the migration before the enforcement deadline.

Microsoft recommends that administrators identify all accounts currently using SMS or voice authentication and monitor the registration status of each user. The company provides a PowerShell-based discovery process to help with this task. Organizations with specific operational, regulatory, or technical requirements can continue using SMS or voice authentication by contracting with a supported customer-managed telecom provider through the Microsoft Security Store.

The change does not apply to Azure AD B2C or Microsoft Entra External ID, which will receive separate announcements. Microsoft emphasizes that there will be no opt-out from the enforcement of passkey registration after the applicable deadlines.