SMS and Phone MFA

[gdistefano]

We saw a recent post that stated MS will be decommissioning SMS and Phone MFA as of July 10.  It said the Message ID is: MC584364.

Can anyone confirm this?

I do not see the official notification from MS anywhere on this.

Thanks

Glen

Original Post: https://m365admin.handsontek.net/changes-to-the-registration-campaign-feature-in-azure-ad/ 

[#2]

No, they will not be decommissioning said methods, at least not now. The message post is about the Registration campaign feature, which prompts the users to register specific methods (authenticator in this case). If you don't want this to happen, adjust the settings under https://portal.azure.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/RegistrationCampai...

[#3]

@gdistefano 

Please take a look at the major statement from Microsoft below:

Microsoft urges you to motivate your users to stop using SMS and voice for MFA. However, if some of your users need more time you can exempt them for now. Sign in as Global Administrator or Authentication Policy Administrator and go to Azure AD > Security > Authentication methods > Registration campaign and exclude these users.

[#4]

@Vasil Michev What do we change these settings to so that users are not forced into the Authenticator App?

[#5]

@Vasil Michev 

Hi - Just to confirm, from July 10th will users be able to still use SMS as a backup MFA method on Authenticator App? Or in order to use SMS, should users be excluded under 'Settings' > 'Excluded Users and Groups' on the below link

https://portal.azure.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/RegistrationCampai...

Thanks!!

[#6]

What if for example here in Israel allot of religious workers who have a "kosher" phone wich is simply an old button nokia phone with allot of blocked content who doesnt have apple store or google play on it, how will they be able to authenticate? will companies still be able to not force workers to use this app method and stay on sms or voice call?

[#7]

Use a Fido2 compliant token such as a ubikey @ArielGeyler