{"id":59348,"date":"2026-10-23T09:01:58","date_gmt":"2026-10-22T23:01:58","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/23\/choose-your-own-telephony-in-microsoft-entra-without-the-risk\/"},"modified":"2026-10-23T09:03:38","modified_gmt":"2026-10-22T23:03:38","slug":"choose-your-own-telephony-in-microsoft-entra-without-the-risk","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/23\/choose-your-own-telephony-in-microsoft-entra-without-the-risk\/","title":{"rendered":"Choose Your Own Telephony in Microsoft Entra Without the Risk"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post <strong>Choose Your Own Telephony in Microsoft Entra Without the Risk<\/strong> we will explain what Microsoft\u2019s telephony change means, when using your own provider makes sense, and how to avoid unexpected costs, security gaps and employee lockouts.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">If some employees still rely on a text message or phone call to verify their identity, this is no longer a change you can leave until later. Microsoft will retire its own SMS and voice delivery for most Microsoft Entra ID users on 1 February 2027, with Global Administrators and external users following on 1 July 2027.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Choose Your Own Telephony actually means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Entra ID is the service that controls who can sign in to Microsoft 365, Azure and other connected business applications. Multi-factor authentication, or MFA, asks users for an additional form of proof when they sign in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Today, Microsoft can deliver that proof through an SMS code or automated voice call. Under Choose Your Own Telephony Provider, your organisation selects and pays a supported telecommunications provider to deliver those messages or calls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Entra still applies your sign-in rules, creates the authentication request and decides whether access should be allowed. The telephony provider handles the final delivery to the employee\u2019s phone.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The configuration experience is scheduled to begin rolling out on 30 October 2026. Soprano and Telesign are the initial providers announced for the private preview, with more expected by general availability.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The first decision is whether you need telephony at all<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Choose Your Own Telephony is a continuity option, not Microsoft\u2019s recommended security direction. SMS codes and voice calls can be intercepted, redirected through SIM-swap fraud, or captured through convincing phishing attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Passkeys, Windows Hello for Business and physical FIDO2 security keys are phishing-resistant. In plain English, they are designed so an employee cannot accidentally give a criminal a reusable sign-in code.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For Australian organisations working towards the Essential Eight, the Australian Government\u2019s cybersecurity framework, this distinction matters. Higher maturity levels require phishing-resistant MFA for important systems and information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We covered the wider retirement timeline in what to do about SMS and voice MFA before 2027. The practical question now is which users genuinely need an exception.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Where keeping SMS or voice can make business sense<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Some frontline, remote or casual employees may not have company smartphones. Others may work in regulated environments where personal phones are prohibited, or depend on a fixed telephone because of accessibility requirements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A common scenario is a 200-person organisation with 160 office employees and 40 field workers. Moving all 200 people to third-party SMS would preserve an old weakness and create an unnecessary monthly bill.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A better approach is to move the office workforce and administrators to passkeys, Windows Hello or security keys, while retaining telephony temporarily for the small field group that cannot yet use those methods. This reduces cost and risk without disrupting operations.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The business benefits of choosing a provider<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Continuity for legitimate exceptions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Employees who cannot immediately move away from telephony can continue accessing business systems. This can prevent missed shifts, delayed customer work and a sudden increase in help desk calls.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">More control over coverage and support<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You can compare providers based on Australian and international coverage, voice support, delivery times and service commitments. This is useful for organisations with regional workers or teams across several countries.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Clearer visibility of usage<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Direct pricing can make the cost of SMS and voice authentication more visible. That creates an incentive to remove unnecessary telephony use rather than allowing it to remain enabled indefinitely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">From 30 October 2026, Microsoft says organisations can configure one provider for SMS and one for voice. That offers some choice, but it does not provide automatic failover between multiple SMS providers.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The risks decision-makers should not overlook<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">You are adding another critical supplier<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If the provider has an outage or delivery problem, affected employees may be unable to sign in. Your contract should clearly cover support ownership, response times, service availability and escalation procedures.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Costs can become unpredictable<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Charges may vary by country, message volume and delivery channel. Voice calls can cost more than SMS, while repeated requests or fraudulent activity can produce unexpected bills.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ask about spending alerts, rate limits, reporting and protections against artificially generated traffic before signing an agreement.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Personal information leaves Microsoft\u2019s delivery service<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Phone numbers and message delivery data will be handled by another supplier. Australian organisations should review where that information is processed, how long it is retained, which subcontractors can access it and how a breach would be reported.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Keeping SMS may create a false sense of compliance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Telephony-based MFA is better than relying on a password alone, but it is not equivalent to phishing-resistant MFA. Simply retaining SMS does not automatically meet your Essential Eight target.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our guide to how Microsoft 365 tools fit the Essential Eight explains why policies, logging and evidence matter as much as owning the right licences.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Your Choose Your Own Telephony rollout checklist<\/h2>\n\n\n\n<ol class=\"wp-block-list\"><li><strong>Identify active users, not just enabled users.<\/strong> Review authentication reports and sign-in records to find people who actually use SMS or voice. Separate MFA use from password reset and SMS used as a primary sign-in method.<\/li><li><strong>Confirm the genuine exceptions.<\/strong> Document why each group cannot use a passkey, Windows Hello, Microsoft Authenticator or a security key. Avoid selecting a provider for the whole workforce because a small group needs telephony.<\/li><li><strong>Move administrators first.<\/strong> Global Administrators and other privileged accounts should use phishing-resistant MFA. A phone call should not be the main barrier between a criminal and control of your Microsoft environment.<\/li><li><strong>Compare providers carefully.<\/strong> Assess Australian coverage, overseas destinations, supported channels, delivery performance, pricing, privacy terms, fraud controls, accessibility, support and disaster recovery.<\/li><li><strong>Check the service scope.<\/strong> Choose Your Own Telephony currently applies to Microsoft Entra ID. Do not assume the same setup covers Microsoft Entra External ID, Azure AD B2C or SMS used as a primary sign-in method.<\/li><li><strong>Create a small pilot group.<\/strong> Test different phone networks, locations, job roles and device types. Include remote employees and users who depend on voice calls.<\/li><li><strong>Prepare recovery options.<\/strong> Maintain controlled emergency access accounts and a documented help desk process. Test what happens if a message is delayed, a phone is lost or the provider is unavailable.<\/li><li><strong>Roll out in stages.<\/strong> Move one business group at a time and monitor failed sign-ins, delivery times, support requests and spending before expanding.<\/li><li><strong>Set an exit date for exceptions.<\/strong> Review telephony users quarterly. Otherwise, a temporary workaround can quietly become a permanent security weakness.<\/li><\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Do not treat this as a simple provider switch<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This change is an opportunity to improve how your organisation verifies identities, not merely replace Microsoft\u2019s SMS delivery with another company\u2019s service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Start with your business requirements, move as many employees as practical to phishing-resistant methods, and use third-party telephony only for documented exceptions. You should also review the wider Microsoft Entra ID security settings that reduce identity risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc is a Melbourne-based Microsoft Partner with more than 20 years of enterprise IT experience. We take a practical, hands-on approach to reviewing Entra, Microsoft 365, Intune, Defender and wider cloud security controls for organisations across Australia and internationally.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are unsure who still depends on SMS or voice, whether Choose Your Own Telephony is necessary, or how to move users without interrupting work, we are happy to review your current setup and give you a clear rollout plan \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Microsoft is ending native SMS and voice delivery in Entra. Learn when third-party telephony makes sense, the risks to manage, and what to check before rollout.<\/p>\n","protected":false},"author":1,"featured_media":59350,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[13,36,103,17],"tags":[],"class_list":["post-59348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-entra-id","category-essential-8","category-microsoft-365-security"],"jetpack-related-posts":[{"id":57894,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/what-to-do-about-sms-and-voice-mfa-in-microsoft-entra-by-2027\/","url_meta":{"origin":59348,"position":0},"title":"What to Do About SMS and Voice MFA in Microsoft Entra by 2027","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Microsoft is retiring native SMS and voice MFA in Entra ID. Here is what Australian businesses should check now to avoid sign-in disruption and reduce phishing risk.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/what-to-do-about-sms-and-voice-mfa-in-microsoft-entra-by-2027.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/what-to-do-about-sms-and-voice-mfa-in-microsoft-entra-by-2027.png 1x, \/wp-content\/uploads\/2026\/07\/what-to-do-about-sms-and-voice-mfa-in-microsoft-entra-by-2027.png 1.5x, \/wp-content\/uploads\/2026\/07\/what-to-do-about-sms-and-voice-mfa-in-microsoft-entra-by-2027.png 2x, \/wp-content\/uploads\/2026\/07\/what-to-do-about-sms-and-voice-mfa-in-microsoft-entra-by-2027.png 3x, \/wp-content\/uploads\/2026\/07\/what-to-do-about-sms-and-voice-mfa-in-microsoft-entra-by-2027.png 4x"},"classes":[]},{"id":58638,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/essential-eight-and-microsoft-365-how-your-security-tools-fit\/","url_meta":{"origin":59348,"position":1},"title":"Essential Eight and Microsoft 365 How Your Security Tools Fit","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"See how Intune, Defender and Entra ID support Essential Eight controls, where gaps remain, and how to turn Microsoft 365 settings into measurable risk reduction.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/essential-eight-and-microsoft-365-how-your-security-tools-fit.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/essential-eight-and-microsoft-365-how-your-security-tools-fit.png 1x, \/wp-content\/uploads\/2026\/08\/essential-eight-and-microsoft-365-how-your-security-tools-fit.png 1.5x, \/wp-content\/uploads\/2026\/08\/essential-eight-and-microsoft-365-how-your-security-tools-fit.png 2x, \/wp-content\/uploads\/2026\/08\/essential-eight-and-microsoft-365-how-your-security-tools-fit.png 3x, \/wp-content\/uploads\/2026\/08\/essential-eight-and-microsoft-365-how-your-security-tools-fit.png 4x"},"classes":[]},{"id":58407,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/how-defender-intune-and-entra-id-secure-microsoft-365-together\/","url_meta":{"origin":59348,"position":2},"title":"How Defender Intune and Entra ID Secure Microsoft 365 Together","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"See how Defender, Intune and Entra ID share security signals to block risky access, protect devices and support Essential 8 without creating unnecessary friction.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/how-defender-intune-and-entra-id-secure-microsoft-365-together.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/how-defender-intune-and-entra-id-secure-microsoft-365-together.png 1x, \/wp-content\/uploads\/2026\/08\/how-defender-intune-and-entra-id-secure-microsoft-365-together.png 1.5x, \/wp-content\/uploads\/2026\/08\/how-defender-intune-and-entra-id-secure-microsoft-365-together.png 2x, \/wp-content\/uploads\/2026\/08\/how-defender-intune-and-entra-id-secure-microsoft-365-together.png 3x, \/wp-content\/uploads\/2026\/08\/how-defender-intune-and-entra-id-secure-microsoft-365-together.png 4x"},"classes":[]},{"id":57511,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/the-microsoft-365-tenant-looked-fine-until-we-checked-the-security-defaults\/","url_meta":{"origin":59348,"position":3},"title":"The Microsoft 365 Tenant Looked Fine Until We Checked the Security Defaults","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Every Microsoft 365 tenant tells a story. Emails flowing, Teams meetings running, SharePoint humming along. From the outside, everything looks operational. But operational is not the same as secure \u2014 and the gap between those two things is where breaches happen. When our team conducts a Microsoft 365 security assessment,\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/04\/the-microsoft-365-tenant-looked-fine-until-we-checked-the-security-defaults-cover.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/04\/the-microsoft-365-tenant-looked-fine-until-we-checked-the-security-defaults-cover.png 1x, \/wp-content\/uploads\/2026\/04\/the-microsoft-365-tenant-looked-fine-until-we-checked-the-security-defaults-cover.png 1.5x, \/wp-content\/uploads\/2026\/04\/the-microsoft-365-tenant-looked-fine-until-we-checked-the-security-defaults-cover.png 2x, \/wp-content\/uploads\/2026\/04\/the-microsoft-365-tenant-looked-fine-until-we-checked-the-security-defaults-cover.png 3x, \/wp-content\/uploads\/2026\/04\/the-microsoft-365-tenant-looked-fine-until-we-checked-the-security-defaults-cover.png 4x"},"classes":[]},{"id":57523,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/why-microsoft-365-security-is-more-than-just-turning-on-mfa\/","url_meta":{"origin":59348,"position":4},"title":"Why Microsoft 365 Security Is More Than Just Turning on MFA","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"When a business enables Multi-Factor Authentication and calls it \"done,\" they've taken one important step \u2014 but left the door wide open in a dozen other places. MFA blocks a significant portion of credential-based attacks. Microsoft's own data shows it stops over 99% of automated password-based attacks. That's meaningful. But\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 1x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 1.5x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 2x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 3x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 4x"},"classes":[]},{"id":58354,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/microsoft-entra-id-security-settings-every-business-should-review\/","url_meta":{"origin":59348,"position":5},"title":"Microsoft Entra ID Security Settings Every Business Should Review","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Most Microsoft 365 breaches begin with a stolen or overprivileged identity. Review these Entra ID settings to reduce risk, support Essential 8 and avoid costly access failures.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/microsoft-entra-id-security-settings-every-business-should-review.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/microsoft-entra-id-security-settings-every-business-should-review.png 1x, \/wp-content\/uploads\/2026\/08\/microsoft-entra-id-security-settings-every-business-should-review.png 1.5x, \/wp-content\/uploads\/2026\/08\/microsoft-entra-id-security-settings-every-business-should-review.png 2x, \/wp-content\/uploads\/2026\/08\/microsoft-entra-id-security-settings-every-business-should-review.png 3x, \/wp-content\/uploads\/2026\/08\/microsoft-entra-id-security-settings-every-business-should-review.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/10\/choose-your-own-telephony-in-microsoft-entra-without-the-risk.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=59348"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59348\/revisions"}],"predecessor-version":[{"id":59349,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59348\/revisions\/59349"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/59350"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=59348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=59348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=59348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}