Microsoft Entra ID: Microsoft-provided SMS and voice authentication to retire for self-service password reset (SSPR)

Microsoft Entra ID will retire Microsoft-provided SMS and voice authentication for self-service password reset (SSPR) starting February 2027, with a 50-day transition per user group. Organizations must prepare alternative recovery methods, as SMS/voice will no longer be available for SSPR after the transition. As Microsoft-provided SMS and voice authentication retire in Microsoft Entra ID, these methods will also become unavailable for SSPR. Organizations have 50 days after the applicable sign-in retirement rollout reaches their tenant to prepare alternative recovery methods. Users may still be able to sign in but lose the ability to reset forgotten passwords. Passkeys and other sign-in methods don’t automatically satisfy SSPR requirements. Admins should identify affected users and ensure they have enough eligible recovery methods to prevent disruptions and increased helpdesk requests. Rollout schedule General Availability (Worldwide, GCC): We expect rollout to begin and complete in February 2027 User population Sign-in retirement rollout begins SSPR transition ends Users other than Global Administrators and external users February 1, 2027 50 days after this rollout reaches your tenant Global Administrators and external users July 1, 2027 50 days after this separate rollout reaches your tenant These are phased rollout start dates, not a single SSPR cutoff for every organization. Each population’s 50-day period begins when its applicable rollout reaches your tenant.  Impact on your organization Who is affected Organizations with users who rely on Microsoft-provided SMS/voice to meet their password-reset verification requirements. This includes users who have another sign-in method but still depend on SMS/voice for password recovery. Platforms and services Microsoft Entra ID SSPR What will happen When the applicable sign-in retirement rollout reaches your tenant: 50-day transition: Existing SMS and voice registrations remain usable for SSPR under your current recovery policy. Registration changes: SMS/voice SSPR registration and refresh prompts stop, but prompts for other eligible methods continue. My Sign-Ins: Users can no longer add SMS/voice methods or edit authentication phone numbers. Existing phone registrations appear disabled, even while usable for SSPR during the transition. Customer-managed telephony (CYOT): Recovery through supported providers remains available. After the 50-day transition period: Microsoft-provided SMS and voice are no longer available […]

The post Microsoft Entra ID: Microsoft-provided SMS and voice authentication to retire for self-service password reset (SSPR) appeared first on M365 Admin.