Will Microsoft Authenticator MFA continue to be supported as SMS and voice MFA are phased out?
Asked by
VelvetMaple42
Microsoft is phasing out SMS and voice-based MFA in favor of passkeys and other phishing-resistant authentication methods. All of my users currently use Microsoft Authenticator push notifications with number matching. Will this setup continue to be supported, or do we need to migrate everyone to passkeys immediately?
Answers
Yes, Microsoft Authenticator push notifications and number matching are still supported. The retirement plans are aimed at SMS and voice MFA, so you do not need to move everyone immediately.
Reply to this answer
You should be fine for the foreseeable future. Passkeys are becoming the preferred option for newly configured users, so it makes sense to start introducing them over time and enable them for existing users where practical. Some users may already have a passkey through Windows Hello or another supported method.
Reply to this answer
Add your answer
Answers are reviewed before publication.
VelvetMaple42: Are passkeys available right now? I checked the security-info page and do not see passkey listed under the available sign-in methods.
MarbleFox63: Availability can depend on the tenant's rollout status, configuration, and which passkey options are enabled. If the option is not displayed yet, Authenticator number matching remains a supported method while passkeys are rolled out.