MFA changes and supported authentication options

MFA Changes: SMS and Voice Authentication Are Being Retired

Microsoft is retiring SMS text messages and phone calls as authentication methods on February 1, 2027. SMS and voice are among the most vulnerable authentication methods available today and provide significantly weaker protection against phishing and account compromise.  Users who rely on these methods will need to move to a supported authentication option. 

WHAT IS CHANGING 

• Beginning October 1, 2026, users who are not using a supported authentication method will be prompted to update their MFA settings. 

• Users will initially be able to choose “Skip for now.” 

• Beginning January 19, 2027, the number of times users can choose “Skip for now” will be limited. 

• By February 1, 2027, affected users must use a supported authentication method. 

SUPPORTED OPTIONS 

• Microsoft Authenticator (recommended)

• Third-party authenticator app

• A rotating hardware token: a physical device that displays a changing one-time code used to verify your identity during sign-in.

• Biometric passkeys (approved list)

WHAT YOU NEED TO DO 

• If you use SMS texts or phone calls for MFA, change to a supported method before February 1, 2027. 

• Keep your primary authentication device available when signing in. 

• Contact the IT Service Desk if you have questions or need assistance. 

FREQUENTLY ASKED QUESTIONS 

Can I keep using text messages or phone calls? 

These methods will be retired on February 1, 2027. 

What if I do not want to use a personal mobile device? 

Contact the IT Service Desk to discuss another supported option, such as a security key or hardware token. 

Can I skip the setup prompt? 

Users may initially choose “Skip for now,” but this option becomes limited beginning January 19, 2027.

RESOURCES

Change your MFA Settings

Password-less Sign-in with Microsoft Authenticator App

Enable/Configure BioPass FIDO 2 Fingerprint Tokens

Approved Keys for Passwordless and Multi-Factor Authentication

LEARN MORE

Frequently asked questions about SMS and voice retirement

Passkeys by default and retirement of Microsoft-provided SMS and voice authentication

GET HELP 

Contact Normandale IT Service Desk by:

  • Opening a Ticket
  • e-mail: IT-ServiceDesk@normandale.edu
  • Calling (952) 358-8181
  • Stopping by L1701
Was this helpful?
0 reviews
Print Article

Related Articles (5)

Change your MFA Settings
Already enrolled in multi-factor authentication but want to change your settings?  You can change how you receive verifications, such as adding a new phone number. You can also add a backup method.
Enabling Password-Less Sign-In for Microsoft accounts.
This article explains how to enable and use Microsoft's Password-Less Sign-In features with the Microsoft Authenticator app.
Getting Started with Multi-Factor Authentication (MFA)
You have the ability to enable multi-factor authentication on your Microsoft Office 365 account for extra security to help protect your information and keep the College safe.
MFA - Enroll with Microsoft Authenticator App
Enrolling and activating MFA is a very simple process, and once it is set up, is very easy to use. To get MFA started, open a web browser and connect to: https://www.minnstate.edu/mfa and then following the first-time setup Wizard
MFA - Use an Alternate Authenticator App
Set up Google Authenticator, Duo Mobile, or another authenticator app as your multi-factor authentication method for your Minnesota State Microsoft 365 account.