Microsoft-provided SMS/voice retires: 1 February 2027

Speed Date with Kaido Järvemets
Passkeys Workshop

Assess your Entra tenant, understand the available solution paths, build the right passkey configuration, and see how to deploy and verify adoption with real tools.

Reserve Your Spot
SEP
23
2026

Live Entra Passkeys Workshop

13:00–17:00 CEST · 4 hours · 2 breaks
Microsoft Teams · Live · English
Maximum 15 participants
€250
per person
Reserve Your Spot

Passkeys Workshop Toolkit included

Four Dates That Define Your Plan

Microsoft's passkey push started September 2026. Postpone only delays the nudge, not the February 2027 SMS/voice retirement.

1 September 2026

  • Auto-enable passkey policy and managed Registration Campaign
  • Users start seeing passkey nudges after MFA
  • Day 0 for your tenant baseline and configuration review

18 September 2026

  • Supported telecom provider and pricing information becomes available
  • Evaluate a provider only where a documented SMS/voice need remains
  • Plan to leave SMS. BYO provider is a fallback, not the default path

30 October 2026

  • Customer-managed SMS/voice provider configuration opens in Entra Security Store
  • Only relevant if you still need SMS/voice after Microsoft's channel ends
  • Your wave plan should already show who is still enabled vs registered vs used

1 February 2027

  • Microsoft-provided SMS/voice delivery ends. No opt-out.
  • SMS-only users get a mandatory passkey registration prompt
  • Your tracking data shows who is registered, verified, or still incomplete

Taught by Someone Who
Built the Tools

The workshop is based on tools your trainer built: an Entra Passkey Audit Toolkit for Microsoft Graph collection and assessment, plus a Guided Enrollment Platform for user deployment and verified adoption.

  • Audit workflow: Policy state, registration vs usage, FIDO2 inventory, CA baseline, and interactive HTML reports.
  • Microsoft Graph from zero: Authentication, scopes and roles, delegated vs application permissions, app registrations, admin consent, certificate-based app authentication, paging, throttling, and Restricted Management AU access.
  • Separate platform demo: Entra-authenticated portal, Advanced Tracker, Azure SQL campaign state, and registered and used verification.
  • Deployment and tracking: Registration Campaign behavior, guided enrollment, repeated toolkit runs, and verified-use evidence.

You're not learning from someone who read the docs.
You're learning from someone who built the tools.

4 hours. Two breaks. One workshop.
Assessment, configuration, deployment, and verified adoption.

What You'll Actually Learn

This workshop connects tenant assessment, Microsoft Graph automation, Entra configuration, user deployment, and verified adoption. Tool-driven, not slide-only.

Passkeys & Solution Paths

Understand the Microsoft timeline, passkey types, enabled vs registered vs used, and the Microsoft-managed, customer-managed, guided-enrollment, and telecom exception paths.

Microsoft Graph from Zero

Beginner-friendly Graph 101: authentication, scopes and roles, delegated vs application permissions, app registrations, admin consent, certificate-based app authentication, read-only audit design, pagination, throttling, and Restricted Management AU access limits.

Assessment & Audit Toolkit

Run the Entra Passkey Audit Toolkit end to end: Graph data sources, collection components, policy state, Registration Campaign, passkey inventory, AAGUID mapping, coverage, and generated output.

Tenant Configuration

Authentication Methods Policy, passkey profiles, targeting, synced vs device-bound, attestation, AAGUID restrictions, opt-out state, and Microsoft Registration Campaign configuration.

User Deployment

Compare Microsoft Registration Campaign, technical user guidance, Organizational Messages, Windows toast notifications, and the Guided Enrollment Portal.

Tracking & Automation

Connect repeated toolkit runs, Azure Automation, Python Azure Functions, Advanced Tracker, Azure SQL, AuditLogs, SigninLogs, Log Analytics, KQL, and Microsoft Sentinel.

The FULL Curriculum

4 technical hours: Introduction → Assessment → Tenant Configuration → Deployment & Tracking → Wrap-up

Introduction & Solution Paths

  • What passkeys are (and what they are not: push ≠ passkey)
  • Four Microsoft deadlines and four readiness buckets
  • Enabled vs registered vs used: why the numbers lie
  • What the workshop includes—and where the separate platform begins

Microsoft Graph, Assessment & Audit Toolkit

  • Microsoft Graph from zero: authentication, scopes, roles, delegated access, app-only automation, app registrations, and authentication options
  • Entra Passkey Audit Toolkit live walkthrough
  • SMS/voice scope, passkey inventory, policy configuration, and Registration Campaign state
  • Restricted Management AU access, 403/partial coverage, data flow, and generated toolkit output

Tenant Configuration

  • Platform prerequisites: Windows, iOS, Android, edge cases
  • Authentication Methods Policy: enablement, group targeting, and exclusions
  • Passkey profiles, attestation, Registration Campaign
  • Postpone vs rollout decision and policy checklist

User Deployment, Tracking & Automation

  • Microsoft Registration Campaign, user guidance, notifications, and guided deployment paths
  • Guided Enrollment Platform and Advanced Tracker live walkthrough
  • Repeated toolkit runs and progress comparison
  • SigninLogs, AuditLogs, Log Analytics, Sentinel, and automation options

Toolkit & Technical Q&A

  • Complete Passkeys Workshop Toolkit
  • Technical Q&A

Your INVESTMENT

What Your Workshop Seat Includes:

Live Audit Toolkit walkthrough: Microsoft Graph collection, assessment logic, generated output, coverage, and progress in action.
Live technical workshop: ask questions throughout the session and discuss the assessment, configuration, deployment, and tracking topics as they are demonstrated.
Passkeys Workshop Toolkit: the complete toolkit covered throughout the session.
€250
per person
Included: 4-hour live Teams workshop
Passkeys Workshop Toolkit
Microsoft Graph, configuration, deployment, and tracking walkthroughs
Live technical Q&A
Reserve Your Spot
Limited to 15 participants

Your TRAINER

Kaido Järvemets
Microsoft MVP 15+ Years Experience

With over 15 years of experience in IT, cybersecurity, and Microsoft technologies, Kaido specializes in Microsoft Azure, Microsoft 365, and hybrid-cloud security solutions. As a Microsoft MVP since 2010, he has deep expertise in Configuration Manager, Enterprise Mobility, and Azure Hybrid & Security.

Kaido was a Microsoft Certified Trainer for 6+ years and has been traveling across Europe for the past 12 years, speaking at events including the Microsoft Management Summit and Midwest Management Summit. He founded User Group Estonia and System Center User Group Estonia, building strong communities of Microsoft technology professionals.

Got Questions? We've Got Answers

Everything you need to know about the Passkeys Workshop.

Is this training live or recorded?

+

This is a live, interactive 4-hour workshop delivered via Microsoft Teams. You can ask questions throughout, discuss your tenant scope, and see the audit toolkit in action. Not a recording.

What do I need to prepare?

+

Nothing required. Just show up. Zero Microsoft Graph experience is fine—we start with Graph authentication, permissions, scopes, endpoints, and automation fundamentals.

What level of experience do I need?

+

You should be responsible for Entra ID authentication, MFA, or identity rollout. Working knowledge of Conditional Access and authentication methods helps. No prior passkey deployment required.

We postponed (opt-out) in September. Is this still relevant?

+

Yes. Postpone only delays the Microsoft nudge. Microsoft-provided SMS/voice still retires on 1 February 2027. The workshop explains the configuration choices and solution paths available before that deadline.

What exactly is included in the workshop price?

+

Your seat includes the live 4-hour Teams workshop, technical Q&A, and the complete Passkeys Workshop Toolkit.

Can I bring my team?

+

Yes. €250 per person. Limited to 15 participants per session so identity, security, and endpoint administrators can stay close to the technical material and live demos.

Register for TRAINING

Secure Your Spot

September 23, 2026 (13:00-17:00 CEST) • Microsoft Teams • English delivery • Max 15 participants
€250 per person. Includes the Passkeys Workshop Toolkit.

If you don't see the registration form below, please click here to open the Microsoft Forms registration form.