Times are changing when it comes to authentication, and those who use Microsoft 365 must be ready for this. The company decided to move away from its MFA solution that used SMS and phone calls, adopting phishing-resistant passkeys as the preferred method of authentication. It is important for companies that deal with Microsoft authorized distributors and other Microsoft software distributors.
What Is Microsoft Changing?
Starting on September 1, 2026, users who are currently supported by SMS and voice authentication services of Microsoft Entra ID shall automatically become supported by passkeys and may receive invitations to register passkeys. The Microsoft SMS and voice authentication services will be decommissioned starting on February 1, 2027.
This update will mean much more than a mere product update for those businesses that purchase and manage Microsoft products via a Microsoft authorized distributor.
Why Is Microsoft Moving Away From SMS and Voice MFA?
While SMS and voice are easy to implement, they are easier to be subject to phishing and social engineering, SIM swap, and phone number hijacking. The passkeys have cryptography credentials that are associated with either the device or credential manager, thus offering higher security against such types of attacks.
Moreover, for organizations that collaborate with a Microsoft distributor, implementing passkeys will allow having a better login experience as users could authenticate using device PIN, fingerprint, face scan, Windows Hello, Microsoft Authenticator, or FIDO2 security key.
How Should Businesses Prepare?
Organizations shouldn’t wait until February 2027. An authorized Microsoft software distributors partner will assist in planning the Microsoft ecosystem, but internally, the organization's IT staff should:
Identify the users using SMS or voice authentication methods and those that require migration.
Configure and test passkeys with a pilot project before a broader deployment.
Implement a passkey registration initiative to encourage employee registration.
Communicate the update clearly so that the employees know what and why changes are being made.
Analyze other SMS or voice authentication requirements, especially for regulated or operational purposes.
An authorized Microsoft distributor's partner can also act as a valuable resource for an organization reviewing its licensing and Microsoft 365 configuration in this context.
What Happens After February 1, 2027?
Once the enforcement deadline has passed, users who do not have any other options besides Microsoft’s SMS and voice as their MFA option will be forced to sign up for a passkey before being able to login. “Microsoft has announced that there will be no opt-out for this enforcement.”
If organizations have a legitimate need for the use of SMS or voice due to regulation or business requirements, customer-managed telecom providers can be accessed via the Microsoft Security Store.
Microsoft Solutions for Modern Businesses
A reputable distributor partner of Microsoft in India should provide much more than software purchasing facilities. The companies can have different requirements that include:
Microsoft 365 for increased productivity and collaboration
Microsoft Azure for cloud computing services and applications
Microsoft Defender for cybersecurity
Microsoft Teams for communication
Microsoft Entra ID for managing identities and access
Microsoft Copilot for workplace productivity powered by AI
Having the right experience in dealing with a reputable distributor of Microsoft in Mumbai can help businesses consider all these solutions depending on their users, workflow, security, and other needs.
Explore More Business Solutions from SYSMIC
This is only one step that goes into creating a secure and efficient digital work environment. At SYSMIC, companies have more IT and business solutions available which help them simplify operations, increase their security, and grow digitally.
From Microsoft 365, Microsoft Defender, business emails, and Google Workspace, email security, cloud backup, and data protection to website design and development, domain registration, web hosting, HRMS and Payroll, Zoho, CRM, and collaboration software, SYSMIC provides businesses with solutions to create a more secure digital environment.
If you need a Microsoft distributor partner in India, a Microsoft distributor partner in Mumbai, or a Microsoft distributor partner in Navi Mumbai, SYSMIC can assist you in finding the best Microsoft solutions that suit your business requirements.
The Bottom Line
The discontinuation of SMS and voice MFA is a definite indication that we are heading towards password less authentication that is secure from phishing attacks. Companies using Microsoft 365 must begin auditing their authentication practices, try out passkeys, and prepare their employees well before time.
Regardless of whether you are working with a Microsoft distributor, Microsoft software distributors, or a Microsoft authorized distributor, early planning could be beneficial in minimizing the login interruptions, support calls, and confusion among employees.
FAQs
1. When will Microsoft make passkeys the default?
From September 1, 2026, passkeys will be the default method of authentication for users that have been activated for SMS or voice verification.
2. When will Microsoft SMS and voice authentication retire?
Delivery of SMS and voice services provided by Microsoft in Microsoft Entra ID will be discontinued from February 1, 2027.
3. Does every Microsoft 365 user need a passkey?
No. The initial transition will only impact users who use the current SMS or voice multi-factor authentication method. Existing users who have passkeys, Windows Hello for Business, FIDO2, or other phishing-resistant authentication mechanisms can continue using them.
4. Are passkeys more secure than SMS MFA?
Yes. Passkeys are phishing-resistant and use cryptographic credentials instead of codes sent via the telecom network.
Check out how to Set Up a Passkey for Your Microsoft Account:
https://youtu.be/WWnN6WmaGuQ?si=esg9PxCFU1Lelzjs
Comments
Log in or sign up to join the conversation.