Move Microsoft Entra Users to Passkeys Before SMS MFA Ends

Attackers have become very good at getting past traditional multifactor authentication. SMS codes and voice calls are now regular targets of SIM swapping, social engineering, and session interception. Microsoft is responding by retiring Microsoft-provided SMS and voice MFA in Microsoft Entra ID and making passkeys the default authentication experience across Microsoft 365, Azure, and connected business applications. In this solo episode of Demystifying Microsoft, host Austin Kelly of the Sourcepass Center of Excellence for Microsoft covers the milestones IT leaders need on their calendars, how passkeys use cryptographic, device-bound authentication to remove whole categories of phishing attacks, and how identity threat detection and response (ITDR) adds containment and remediation inside your Microsoft 365 environment, alongside Microsoft’s native controls rather than in place of them.