Plan
active
Microsoft sets Feb 2027 deadline to retire Entra ID SMS/voice auth
- Engineer — Plan: Hard deadline of February 2027 for Entra ID SMS and voice auth retirement; begin inventorying affected users and roll out FIDO2/passkey or Authenticator app enrollment before the cutover to avoid sign-in disruptions.
- SOC/IR — Learn: The eventual deprecation of SMS/voice MFA will shift the phishing and MFA-bypass attack surface — worth tracking to anticipate adjustments to credential-theft detection logic, but no immediate hunting action needed.
- Leader — Plan: Microsoft is enforcing a February 2027 hard deadline on SMS/voice auth in Entra ID; allocate team capacity this quarter to scope user migration and avoid service disruptions that could escalate to a leadership incident.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.