Authentication & MFA
Microsoft to retire Entra ID SMS and voice authentication by 2027
Microsoft is phasing out legacy MFA in favor of passkeys as attackers increasingly target the identity layer and conditional access policies.
Zero trust
Zero trust is a security framework based on the principle of "never trust, always verify," requiring continuous authentication and authorization for every access request.
Understand the story
Follow this story through dated reporting and the underlying records. Evidence labels distinguish documented findings, attributed reporting, disputed accounts and claims that remain unverified. Start with the background reports below, then read the latest developments.