https://gingersysadmin.com/tags/fido/ Recent content in FIDO on The Ginger Sysadmin Blog Hugo en-us Mon, 13 Jul 2026 13:06:56 -0500 https://gingersysadmin.com/posts/entra-sms-retired/ Mon, 13 Jul 2026 13:06:56 -0500 https://gingersysadmin.com/posts/entra-sms-retired/ <p>As I have predicted for years now, the decision to stop native support for SMS/Phone 2FA in Entra has come.</p> <p><a href="https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement" target="_blank" rel="noopener">https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement</a> </p> <p>They market it as security, it is 100% a financial cost cutting move, but sure&hellip;you can say it was security.</p> <p>Should executives be using SMS 2FA? No. Do plant workers with a basic/restricted corporate account need passkeys/Microsoft authenticator&hellip;no.</p> <p>I am fully aware of the phishing implications of SMS, but that ALSO applies to almost every other form of 2FA/MFA. Microsoft Authenticator (non-passkey) is just as vulnerable to proxied login pages and credential theft. Sure, SIM swap attacks are possible, but the risk of a generic office employee being SIM swapped is low. I think passkeys/FIDO is cool and I use it all myself. I like that we have developed a standard that does not require everyone to buy a Yubikey (I will still happily buy them&hellip;they are fun). Do we still have a long way to go? Yes&hellip;</p>