Microsoft Identity, Security & Management Changes

Entra passkeys become the default September 1, 2026, SMS/voice authentication retires in February 2027, and custom CSS sign-in layouts retire October 26. Recent implementation guidance emphasizes Graph permission-baseline automation, least-privilege dependency testing, and migration planning, while agent identity and governance expand across Entra, Defender, Agent 365, Intune, and Purview.