352 - So long, SMS and voice authentication
Summary
Hosts Tobias and Jussi discuss Microsoft’s retirement of SMS and voice authentication in Entra ID, detailing the transition to passkeys by early 2027. They analyze the tight timeline, operational impacts, and the importance of using Microsoft’s provided scripts and communication templates. The episode also covers best practices for migrating the Authenticator app to new phones and shares war stories about MFA lockouts to emphasize the need for robust break-glass accounts.
Topics discussed
Introduction and handwriting practice discussion
Summer vacation plans and family activities
Microsoft retiring SMS and voice MFA in Entra ID
Benefits of Passkeys and security improvements
Timeline details and auto-enrollment campaigns
Bring Your Own Telecom provider option
Impact on developers and service accounts
Preparation steps and Microsoft resource templates
War stories on MFA lockouts and break-glass accounts
Migrating Authenticator to a new phone
Listen ad-free on Castria