Microsoft Entra ID
Authentication

Set up SMS and voice with your own telephony provider in the Microsoft Entra admin center

In brief

The guide now uses “telephony provider” terminology, updates setup labels and links, and adds guidance to choose a nearby Azure region and Flex Consumption plan with one always-ready instance for performance.

What Entra admins need to know

No action is required; administrators will see updated terminology and deployment guidance when using the guide.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Set up SMS and voice with your own telecomtelephony provider in the Microsoft Entra admin center

Before you begin, confirm that your Microsoft Entra policies allow the setup script to create the application and credentials it needs. If you use app management policies for credentials, multitenant apps, or custom Application ID URIs, review them with your Microsoft Entra administrator.

Step 1: Purchase and activate your telecomtelephony provider

  1. Sign in to the Microsoft Entra admin center as an Authentication Policy Administrator.

  2. Go to Entra ID > Authentication methods > Policies and select Add telecom profile. The Set up an SMS or voice provider page guides you through subscription, integration, and profile setup.

    :::image type="content" source="media/choose-your-own-telephony-set-up/setup-overview.png" alt-text="Redacted screenshot of the Set up an SMS or voice provider page and its three setup tasks." lightbox="media/choose-your-own-telephony-set-up/setup-overview.png":::

  3. Select Subscribe to a telecoman SMS or voice provider and choose a supported telecomtelephony provider. Use Get solution to open its offer in Microsoft Security Store, or select an existing subscription with Select details. See Available telephony providers.

    :::image type="content" source="media/choose-your-own-telephony-set-up/subscribe-telecom-provider.png" alt-text="Redacted screenshot of the telecomtelephony provider selection pane. Demo pricing and offer details are obscured." lightbox="media/choose-your-own-telephony-set-up/subscribe-telecom-provider.png":::

  4. Purchase your provider's offer. For detailed purchasing instructions, see Purchase and deploy a SaaS solution from Security Store.

  5. After you Place Order, select Configure Account Now and follow your provider's registration instructions.

Step 2: Deploy the integration

On Set up an SMS or voice provider, select Set up the provider integration. Select the Azure hosting subscription and review the telecomtelephony provider configuration populated in the pane.

:::image type="content" source="media/choose-your-own-telephony-set-up/integration-setup.png" alt-text="Redacted screenshot of the provider integration pane with subscription selection, Function App setup, registration guidance, and Verify." lightbox="media/choose-your-own-telephony-set-up/integration-setup.png":::

What the setup script does

The setup script deploys everything needed to connect Microsoft Entra ID to your telecomtelephony provider, so you don't have to create Azure resources by hand. It walks you through a few choices, then shows the full deployment plan. Nothing is created until you approve it.

After you approve, the script creates the Microsoft Entra application, deploys and secures the Azure resources, and applies your provider's configuration. Deployment usually takes a few minutes.

Costs

Run the setup script

.\Setup-Epp.ps1
```
  1. Follow the prompts to select the customer tenant, hosting subscription, Azure region, telecomtelephony provider, runtime, and hosting plan. Use the configuration shown in the integration pane and approve the deployment plan.
  2. Save
  1. Save the deployment summary, including its tenant ID, endpoint URL, and Application (client) ID. You need these values to complete provider registration and configure your profile.

Step 3: Complete telephony provider registration

After deployment completes, return to your telephony provider's registration page to complete the deployment summary, including its tenant ID, endpoint URL, andprovider setup.

  1. Provide the Application (client) ID. You need these values to complete provider created by the setup script when requested by your telephony provider.
  2. Complete any additional registration and configure your profile.steps required by the provider.

Step 3: Complete telecom provider registration

After deployment completes, return to your telecom provider's registration page to complete the provider setup.

  1. Provide the Application (client) ID created by the setup script when requested by your telecom provider.
  2. Complete any additional registration steps required by the provider.
  3. In Microsoft Security Store
  4. In Microsoft Security Store, go to Management > My Solutions and confirm that the Subscription status is 'Subscribed' before continuing.
  5. Return to Set up the provider integration in the Microsoft Entra admin center and select Verify to check the telecomtelephony provider subscription.

Create a profile for each intended channel. The wizard carries over the current channel's targets and populates the endpoint and application ID when you select the deployed Function App. Start in Evaluation, validate the integration, and then gradually move delivery to your telecomtelephony provider.

Configure CYOT settings

  1. On Set up an SMS or voice provider, select Create an SMS or voice profile.

  2. On Delivery channel, select SMS or Voice call, then select Next. Each profile configures one delivery channel.

    :::image type="content" source="media/choose-your-own-telephony-set-up/delivery-channel.png" alt-text="Redacted screenshot of the Delivery channel step with SMS and Voice call options." lightbox="media/choose-your-own-telephony-set-up/delivery-channel.png":::

  3. Keep the existing production targets and selected Function App unchanged.

  4. Review and save the profile changes. Confirm the saved plan, percentage, endpoint, application ID, and targets.

  5. Test telephony provider delivery before increasing traffic.

  1. Keep the profile in Production.
  2. Increase Traffic routed through provider percentage in increments until you reach 100.
  3. Keep the endpoint URL, application client ID, and existing production targets unchanged while updating the traffic percentage.
  4. Validate authentication and telephony provider delivery after every percentage change.
  5. Increase the percentage after each stage validates successfully. To investigate an issue, hold at the current percentage and see Monitor and troubleshoot.

Troubleshooting

To diagnose integration issues, use the troubleshooting guide to identify whether the issue is with the Microsoft Entra configuration, Azure Function, telephony provider, or authentication flow.

See Monitor and troubleshoot your own telephony provider for diagnostic steps, logs, common issues, and remediation guidance.

Related content

Daily Entra.News

Get daily email updates

Get a concise summary of the latest Microsoft Entra updates delivered straight to your inbox.

Loading the secure signup form…