MC584364 – Updated July 7, 2023: Microsoft has updated the rollout timing of this change. Thank you for your patience.
Publicly switched telephone networks (PSTN) such as SMS and voice authentication are the weakest forms of MFA. To help your users move away from them Microsoft is introducing changes to the Microsoft managed state of the Registration campaign feature in Azure Active Directory (recently renamed Microsoft Entra ID).
When this will happen:
July 14, 2023
How this affects your organization:
Starting July 10th, 2023, users in your organization that are relying on SMS and voice for MFA will be prompted to use the Microsoft Authenticator app. They can skip this prompt for a maximum of 3 times, after which registration of the app will be required.
What you can do to prepare:
Microsoft urges you to motivate your users to stop using SMS and voice for MFA. However, if some of your users need more time you can exempt them for now. Sign in as Global Administrator or Authentication Policy Administrator and go to Azure AD > Security > Authentication methods > Registration campaign and exclude these users.
Previous Identity Service Changelog Messages
Whether it’s Security or Cloud Computing, we have the know-how for you. Sign up for our newsletters here.