The article replaces “telecom provider” with “telephony provider” across its title, guidance, table, and support references. Related link labels and the FAQ and Security Store links were also updated.
Keep up with Microsoft Entra
Daily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
Day in brief
MFA puts SMS and voice behind stronger methods ahead of February 2027 retirement
Microsoft Entra MFA flows are being changed to prioritize more secure non-telephony methods, while SMS and voice remain available under “Show more verification methods.” Microsoft says no configuration change is required, but users should expect a resend waiting period and administrators should plan for the stated February 2027 SMS and voice retirement. The other significant operational change is a GoTo provisioning migration deadline; most remaining updates are lower-impact documentation maintenance, including terminology and consent clarifications.
- MFA now prioritizes non-telephony verification methods
Entra ID · AuthenticationThe Message Center notice says SMS and voice remain available under “Show more verification methods,” but more secure non-telephony methods are prioritized in MFA flows. It describes an October 2026 rollout, requires no configuration changes, and warns of a resend waiting period and planned SMS and voice retirement in February 2027.
- GoTo provisioning must move off Authorization Code Grant
Entra ID · ProvisioningThe GoTo automatic-provisioning guidance now directs administrators to create an OAuth client and configure Client Credentials Grant because Authorization Code Grant is being retired. Migration is required by March 31, 2027; otherwise user and group synchronization may stop, while SSO remains unaffected.
- Restarting cross-tenant sync too early can leave removed usersEntra ID · Provisioning
The provisioning known-issues guidance says users removed from a cross-tenant synchronization job’s scope aren’t deleted from the target tenant if the job is restarted before the next synchronization cycle. Administrators should wait for that cycle before restarting.
- Consent guidance flags a dynamic-permission portal limitation
Entra ID · Microsoft identity platformThe developer guidance now explicitly states that the App registrations and Enterprise applications portal experiences do not know about dynamic consent permissions at consent time. This clarifies how administrators should interpret permission information when reviewing admin-consent scenarios.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
14 updates
Microsoft Entra ID
14 updatesMicrosoft Entra ID updates MFA flows to prioritize more secure non-telephony methods over SMS and voice, which remain available under "Show more verification methods." The rollout occurs in October 2026, with no configuration changes required. Users should prepare for a resend waiting period and plan for SMS/voice retirement in February 2027.
The page consistently replaces “telecom provider” with “telephony provider” across descriptions, architecture guidance, responsibilities, and related setup, fraud, resiliency, and cost links.
The guide now uses “telephony provider” terminology, updates setup labels and links, and adds guidance to choose a nearby Azure region and Flex Consumption plan with one always-ready instance for performance.
The resiliency article now consistently uses “telephony provider” instead of “telecom provider” and updates related headings, anchors, links, and sample-resource labels.
The article replaces “telecom provider” with “telephony provider,” updates related resource titles and links, and adds an anchor for the previous heading.
Howto Vm Sign In Azure Ad Linux
Feature updateThe documentation now lists AlmaLinux 10, Debian 13, openSUSE Leap 16, Oracle Linux 10, Rocky Linux 10, SLES 16, and Ubuntu through 26.04.
Howto Vm Sign In Azure Ad Linux
Feature updateThe supported versions now include Debian 13, Oracle Linux 10, and Rocky Linux 10.
Howto Vm Sign In Azure Ad Linux
Feature updateThe documentation no longer lists Debian 13, Oracle Linux 10, or Rocky Linux 10 as supported versions. Debian 9–12, Oracle Linux 8–9, and Rocky Linux 8–9 remain listed.
Howto Vm Sign In Azure Ad Linux
Doc updateThe Linux VM sign-in article received a minor formatting edit, with one line removed.
Configure GoTo for automatic user provisioning with Microsoft Entra ID
RetirementAction requiredThe tutorial now directs administrators to create an OAuth client and configure Client Credentials Grant because Authorization Code Grant is being retired. Migration is required by March 31, 2027; otherwise provisioning may stop, affecting user and group synchronization, while SSO remains unaffected.
Known issues for provisioning in Microsoft Entra ID
Doc updateAction requiredUsers removed from a cross-tenant synchronization job’s scope aren’t deleted from the target tenant if the job is restarted before the next synchronization cycle.
Admin Consent Workflow Faq
Doc updateThe FAQ now specifies that the two admin consent requests represent static consent permissions and dynamic consent permissions.
Consent Types Developer
Doc updateThe guidance now explicitly states that the App registrations and Enterprise applications portal experiences do not know about dynamic consent permissions at consent time.