Updated October 30, 2026: We have updated this post with additional information as the feature is now generally available. Thank you for your patience.
What and why
Choose Your Own Telephony Provider (CYOT) is now generally available in Microsoft Entra ID. With CYOT, your organization can deliver SMS and voice authentication through a supported telecom provider of its choice. You purchase the provider's offer in Microsoft Security Store and manage the commercial relationship directly with the provider.
Microsoft-provided SMS and voice authentication begins retiring on February 1, 2027. To keep SMS and voice authentication available for users who need it, set up CYOT before that date.
Microsoft recommends phishing-resistant authentication methods, such as passkeys, instead of SMS or voice. Use telephony-based authentication only for users who have a business, regulatory, or technical need for it.
What you need to do
If your organization plans to use CYOT:
- Identify users who need SMS or voice. Confirm which users have a requirement that phishing-resistant methods can't meet.
- Choose a provider. Compare the supported telecom providers on coverage, channels, pricing, support, and compliance.
- Check purchasing requirements. Confirm that you have a paid Azure subscription that is eligible for Security Store purchases, and that you have the Owner role, or Contributor plus Role Based Access Control Administrator.
- Estimate costs. Review provider pricing and Azure hosting costs.
- Set up and roll out. Follow Set up SMS and voice. Start in evaluation mode, then increase traffic to your provider in stages.
- Complete your transition before February 1, 2027. Review the guidance for the retirement of Microsoft-provided SMS and voice authentication.
Learn more