MFA - Methods to MFA

Description:

Important Microsoft MFA (Multi-Factor Authentication) Update 

Microsoft is retiring its built-in text message (SMS) and voice call authentication services. These methods are being phased out in favor of more secure authentication options that better protect your account and information.

As a result, SUNY Delhi is moving away from using text messages and phone calls to verify your identity when signing in to Microsoft 365 and other campus systems.

What is changing? 

If you currently receive a text message or phone call with a verification code when signing in, you will need to switch to another approved MFA method.

The Microsoft Authenticator app is a recommended option for verifying your identity. Other options include passkeys, security keys, and hardware tokens.

What do I need to do? 

If you already use the Microsoft Authenticator app or another approved MFA method, no action is required at this time. 

If you currently use SMS or voice calling for MFA, please set up an alternate MFA method before February 1, 2027, when these authentication methods are discontinued. 

• Instructions for setting up Microsoft Authenticator 

• Seeing a prompt to set up a passkey? Microsoft has begun prompting users who are enabled for SMS or voice authentication to register a passkey. You may see this prompt when signing in. Follow the on-screen instructions if you wish to set one up. 

  • If you don’t wish to use passkey and/or no longer wish to be prompted you can remove your phone number from your methods to stop the prompt.

Information:

MFA methods: 

• Microsoft Authenticator app – Recommended: Install the Microsoft Authenticator app on your smartphone. Depending on the sign-in, you may approve a notification from the app or generate a verification code. 

• Passkey: A passwordless sign-in method stored on your phone, computer, or compatible password manager or security key. You verify your identity using a PIN, fingerprint, or facial recognition.  

• Security Key: A physical device used to verify your identity when signing in. It connects to your computer or other device using USB or NFC and uses a secure, passwordless sign-in credential called a passkey. 

• Hardware Token: A small physical device that displays a temporary security code you enter when signing in. Supplied by CIS on a limited basis. 

Additional Info/Resources: 

Microsoft article on SMS & Calls going away

See 'Related Articles' for additional information.