Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+21 more

    SMS MFA Exit Checker: Who Gets Blocked on 1 Feb 2027

    1

    Reads your Entra ID phone-only MFA export and plans every user's move to passkeys before Microsoft retires SMS and voice MFA. Read-only: never changes the tenant.

    Free

    Security scanned
    SMS MFA Exit Checker: Who Gets Blocked on 1 Feb 2027

    SMS MFA Exit Checker: Who Gets Blocked on 1 Feb 2027

    Example session with this skill installed

    Here is phone-only-users.csv (134 rows). Today is 2 November 2026. Last week we had 146. Passkey (FIDO2) is enabled for SMS-Voice-Exit, registration campaign is Off, Temporary Access Pass is enabled. What do we do this week?

    • Read your context and instructions
    • Compiled the sms mfa exit

    (Illustrative example with made-up numbers.)

    Rows read: 134 · skipped: 0 · columns OK

    SMS/voice MFA exit status, 2 November 2026

    Phone-only users: 134 (change vs last week: -12) · Next deadline: 1 February 2027 (91 days)

    BucketUsersDeadlineDays leftNeeded per week
    Admins (role not stated: flagged)41 February 2027911
    Guests (split internal/external if known)101 February 2027911
    Members1201 February 20279110

    Readiness

    Passkey enabled: OK · Campaign: MISSING · Temporary Access Pass: OK · SSPR: UNKNOWN

    This week (max 5)

    1. Move the 4 admins and both break-glass accounts to FIDO2 keys.
    2. Turn on the registration campaign for SMS-Voice-Exit (passkey method).
    3. Send wave 1 (awareness) to the 120 members.
    4. Decide per guest: convert, give another strong method, or remove.
    5. Send the SSPR check results so readiness can be completed.

    Message draft (awareness)

    From 1 February 2027 text-message and phone-call sign-in checks stop working. You will be asked to set up a passkey instead. It takes about five minutes on your phone. Instructions follow next week.

    Summary for management

    134 users still rely only on SMS or voice MFA, down 12 in a week. At 10 users a week we finish one week before 1 February 2027. The registration campaign is the one missing control.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Microsoft retires its own SMS and voice MFA on 1 February 2027 for all users except Global Administrators and external users (1 July 2027). Internal guests are in scope on 1 February 2027. Users whose only method is SMS or voice then get a blocking prompt to register a passkey. There is no opt-out for enforcement. (Source: Microsoft 365 message MC1519855 and the Microsoft Learn FAQ on SMS and voice retirement.)

    Paste or attach phone-only-users.csv (or a user registration details export) and the skill:

    • counts phone-only users by bucket (admins, guests, members) with the right deadline and days left
    • works out how many users per week you must move to finish a week early
    • checks readiness from your read-only results: Passkey (FIDO2) enabled, registration campaign, Temporary Access Pass, SSPR (never marks OK without evidence)
    • gives this week's 5 actions, admins and break-glass first
    • drafts the user message for the wave you are in (awareness, action, reminder)
    • lists who to escalate from 14 days before the date
    • ends with a 3-sentence summary for management

    It never runs commands that change the tenant. Markdown only: no scripts, no network access. If Microsoft changes a date, give it the message ID and it uses the new date and says so.

    Works with the free Entra SMS MFA Exit Kit: Top 5 (GitHub: runbooklabhq/entra-sms-mfa-exit-kit-free), whose read-only check exports phone-only-users.csv. Needs Entra ID P1 or P2 for the registration details report.

    Not affiliated with or endorsed by Microsoft.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before any payment.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Free forever

    No account required to browse

    Trust & safety

    Security scan

    Security scan passed today

    • Free with an Agensi account

    Listedtoday

    What's inside

    Frequently Asked Questions