Security questions aren't used as an authentication method during a sign-in event. Instead, security questions can be used during the self-service password reset (SSPR) process to confirm who you are. Administrator accounts can't use security questions as verification method with SSPR.
Day in brief
Entra ID documentation clarifies security questions and SMS sign-in
The 8 December period was quiet: two updated Microsoft Learn pages for Entra ID, with no new or retired items and no Message Center announcements. Both changes are documentation clarifications; the supplied evidence does not indicate a feature launch, retirement, or changed tenant behavior.
- Security questions are documented as SSPR-only
Entra ID · AuthenticationThe Authentication Security Questions page states that security questions are not used during a sign-in event. They can be used to confirm identity during self-service password reset, but administrator accounts cannot use them as an SSPR verification method. This is a documentation clarification, not evidence of a new control or rollout.
- SMS sign-in is listed for MFA and SSPREntra ID · Authentication
The Authentication page’s method table lists Short Message Service (SMS) sign-in as supported for both MFA and SSPR. The supplied change does not establish that this support is newly introduced or that tenant settings changed, so administrators should treat it as a reference update.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
2 updates
Microsoft Entra ID
2 updatesAuthentication
Updated| [Short Message Service (SMS) sign-in](howto-authentication-sms-signin.md) | Yes | MFA and SSPR |