Microsoft Entra ID
AuthenticationSMS-based user sign-in for Microsoft Entra ID
In brief
The documentation states that Microsoft-provided SMS and voice authentication, including SMS first-factor sign-in, retires on February 1, 2027. It also updates the setting label to “Enable first factor sign-in” and notes automatic disabling after 30 days without traffic.
What Entra admins need to know
Move users to passkeys or configure a customer-managed telecom provider before the retirement date to avoid disruption. Re-enable first-factor sign-in if it is automatically disabled.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Configure and enable users for SMS-based authentication using Microsoft Entra ID
To simplify and secure sign-in to applications and services, Microsoft Entra ID provides SMS-based authentication. This method lets users such as frontline workers sign in using only a registered phone number and a one-time passcode (OTP) sent via SMS, without needing a username or password.
Move to modern, phishing-resistant authentication
- Assign a phone number for each user account.
- This phone number can be assigned in the Microsoft Entra admin center (which is shown in this article), and in My Staff or My Account.
First, let's enable SMS-based authentication for your Microsoft Entra tenant.
Sign in to the Microsoft Entra admin centerFirst, let's enable SMS-based authentication for your Microsoft Entra tenant.
- Sign in to the Microsoft Entra admin center
- Select Enable and select Target users. You can choose to enable SMS-based authentication for All users or groups.
Assign the authentication method to users and groups
@@ -2,13 +2,16 @@ title: SMS-based user sign-in for Microsoft Entra ID description: Learn how to configure and enable users to sign-in to Microsoft Entra ID using SMS ms.topic: how-to-ms.date: 03/04/2026+ms.date: 10/29/2026 ms.reviewer: anjusingh ms.custom: sfi-ga-nochange, sfi-image-nochange --- # Configure and enable users for SMS-based authentication using Microsoft Entra ID +> [!WARNING]+> **Microsoft-provided SMS and voice authentication is retiring February 1, 2027.** This retirement includes SMS first-factor sign-in. Move users to passkeys or configure a customer-managed telecom provider to avoid sign-in disruption. For details, see [SMS and voice authentication retirement](concept-sms-voice-retirement.md).+ To simplify and secure sign-in to applications and services, Microsoft Entra ID provides SMS-based authentication. This method lets users such as frontline workers sign in using only a registered phone number and a one-time passcode (OTP) sent via SMS, without needing a username or password. ## Move to modern, phishing-resistant authentication@@ -76,6 +79,9 @@ There are three main steps to enable and use SMS-based authentication in your or * Assign a phone number for each user account. * This phone number can be assigned in the Microsoft Entra admin center (which is shown in this article), and in *My Staff* or *My Account*. +> [!NOTE]+> To reduce phishing and fraud risks, Microsoft will disable SMS first-factor sign-in for tenants with no SMS first-factor sign-in traffic in the last 30 days. Tenant administrators can re-enable SMS first-factor sign-in at any time by selecting the **Enable first factor sign-in** checkbox.+ First, let's enable SMS-based authentication for your Microsoft Entra tenant. 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Authentication Policy Administrator](~/identity/role-based-access-control/permissions-reference.md#authentication-policy-administrator).@@ -88,9 +94,9 @@ First, let's enable SMS-based authentication for your Microsoft Entra tenant. 1. Select **Enable** and select **Target users**. You can choose to enable SMS-based authentication for *All users* or groups. > [!NOTE]- > To configure SMS-based authentication for first-factor (that is, to allow users to sign in with this method), check the **Use for sign-in** checkbox. Leaving this unchecked makes SMS-based authentication available for multifactor authentication and Self-Service Password Reset only.+ > To configure SMS-based authentication for first-factor (that is, to allow users to sign in with this method), check the **Enable first factor sign-in** checkbox. Leaving this unchecked makes SMS-based authentication available for multifactor authentication and Self-Service Password Reset only. - +  ## Assign the authentication method to users and groups