MC1519855 High
(Updated) Microsoft Entra: Choose your own telephony provider now generally available
Summary AI-generated
Choose Your Own Telephony Provider is now GA in Entra ID; Microsoft SMS/voice authentication retires February 1, 2027. Set up CYOT to maintain SMS/voice authentication for needed users.
Suggested actions AI-generated
- Identify users needing SMS or voice
- Confirm requirements unmet by phishing-resistant methods
- Choose a telecom provider
- Check Azure subscription and roles
- Review provider and hosting costs
- Set up and roll out CYOT
- Complete transition before February 1, 2027
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1528000 Microsoft Entra ID: Reminder to migrate from Microsoft-provided SMS and voice authentication
- MC1426371 (Updated) Microsoft Entra: Passkeys by default and retirement of Microsoft-provided SMS and voice authentication
- MC1474104 Microsoft Entra ID: Follow-up on SMS first-factor sign-in retirement and upcoming changes
- MC1518029 Microsoft Entra ID: Risk-based anti-bot verification (CAPTCHA) for SMS and voice authentication
- MC1448374 (Updated) Microsoft Entra ID: Retirement of SMS first-factor sign-in for Entra ID Free tenants
- MC1422061 Microsoft Entra ID: Retirement of Custom Controls in Conditional Access and migration to External MFA
Original post from Microsoft
Updated October 30, 2026: We have updated this post with additional information as the feature is now generally available. Thank you for your patience.
[What and why]
Choose Your Own Telephony Provider (CYOT) is now generally available in Microsoft Entra ID. With CYOT, your organization can deliver SMS and voice authentication through a supported telecom provider of its choice. You purchase the provider's offer in Microsoft Security Store and manage the commercial relationship directly with the provider.
Microsoft-provided SMS and voice authentication begins retiring on February 1, 2027. To keep SMS and voice authentication available for users who need it, set up CYOT before that date.
Microsoft recommends phishing-resistant authentication methods, such as passkeys, instead of SMS or voice. Use telephony-based authentication only for users who have a business, regulatory, or technical need for it.
[What you need to do]
If your organization plans to use CYOT:
- Identify users who need SMS or voice. Confirm which users have a requirement that phishing-resistant methods can't meet.
- Choose a provider. Compare the supported telecom providers on coverage, channels, pricing, support, and compliance.
- Check purchasing requirements. Confirm that you have a paid Azure subscription that is eligible for Security Store purchases, and that you have the Owner role, or Contributor plus Role Based Access Control Administrator.
- Estimate costs. Review provider pricing and Azure hosting costs.
- Set up and roll out. Follow Set up SMS and voice. Start in evaluation mode, then increase traffic to your provider in stages.
- Complete your transition before February 1, 2027. Review the guidance for the retirement of Microsoft-provided SMS and voice authentication.
Learn more
- Choose your own telephony provider for SMS and voice authentication
- Set up SMS and voice with your own telecom provider
- Troubleshoot SMS and voice
- Protect against telephony fraud
- Plan for resiliency and high availability
- Frequently asked questions
- Passkeys by default and retirement of Microsoft-provided SMS and voice authentication
Additional details from Microsoft
- Summary
- Microsoft Entra ID now generally supports Choose Your Own Telephony Provider (CYOT) for SMS and voice authentication, retiring Microsoft-provided services by February 1, 2027. Organizations must select a provider, set up CYOT, and transition before that date, while Microsoft recommends phishing-resistant methods like passkeys.