Microsoft urges Entra ID admins to migrate users to passkeys
Summary
Microsoft is strongly encouraging administrators of Entra ID (formerly Azure AD) to transition users to passkeys and other phishing-resistant authentication methods. This push is to prepare for the retirement of SMS and voice authentication methods, scheduled for February 2027, to prevent sign-in disruptions.
IFF Assessment
The article promotes the adoption of more secure authentication methods like passkeys, which improves defenses against phishing and unauthorized access.
Defender Context
Defenders should be aware of Microsoft's ongoing efforts to phase out less secure authentication methods like SMS and voice calls in favor of stronger alternatives. Encouraging or mandating the adoption of passkeys and multi-factor authentication (MFA) is a critical step in reducing the attack surface for credential-based compromises and ensuring business continuity.