Debug: Database connection successful phpBB3 Lifeboat Forum on Azure (Page 2) / Meta New Mars / New Mars Forums

Announcement

Announcement: This forum is accepting new registrations via email. Please see Recruiting Topic for additional information. Write newmarsmember[at_symbol]gmail.com.

#26 2024-04-21 11:21:12

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut ....

I searched but did not find a way to set the default post display order from Ascending to Descending.

The NewMars FluxBB 1.5.11 forum uses Descending order, and our members are used to it.

it might be possible to change the phpBB3 default by changing the source code.

There used to be a way to set the board default to Descending,.but that feature seems to have gone away in the current version.

I created a topic in Meta New Mars to explain how to change the setting.

***

I'll try to schedule time to look for the location in the phpBB3 source code where the default of Ascending is set for new users. If it is not too difficult I'll change it.  The problem with such changes is that when we subsequently upgrade to the next version of phpBB3, those local changes will go away.

Update: I added the link to the demo site in the first post of this topic.

(th)

Offline

Like button can go here

#27 2024-04-21 14:43:39

SpaceNut
Administrator
From: New Hampshire
Registered: 2004-07-22
Posts: 30,839

Offline

Like button can go here

#28 2024-04-21 16:29:29

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut re #27

Thank you for all three links! They were all interesting, but buried in one of them was the exact answer:

There is a database field that can be changed using MySQL Update. The field needs to be changed from A to D.

The solution is as simple as that. All future users will automatically enjoy Descending order as the default.

One of the comments that appeared in one of the three links was to the effect that 99.9% of forum users prefer Descending order, so why does phpBB3 still ship with the unwanted default?  My guess would be that whoever programmed that section liked Ascending, and no one every changed it.

I'll try to make that change some time next week.

(th)

Offline

Like button can go here

#29 2024-04-22 07:26:42

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut re #28 ...

Following up ... I changed the post display order for the Anonymous User from Ascending to Descending. The display time zone was set to UTC at the same time, because the forum software insisted upon a time zone.

Therefore, all future "guest" visits will show the time in UTC, and posts will appear in Ascending order.

***
In other news... I created a topic in Mars Economy for the daily calendar updates.

The new topic gives credit to RobertDyck for the innovations to allow the Business Calendar we have been showing to far exceed any competitive calendar.

I'm still looking for an opportunity to create the Mars Business Calendar combined with the Earth Calendar, for sale to an audience of forward looking Earth people.

It will require a capital investment to put this new combined calendar into motion, but once set. I expect it to be successful.

For one thing, every Astronomy Department in every College or University would be a logical candidate for purchase and display of this calendar, and it is a terrific opportunity for the Mars Society to gain visibility on campuses, world wide.

(th)

Offline

Like button can go here

#30 2024-04-23 10:17:54

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For all current/active NewMars members...

http://40.75.112.55/phpBB3/index.php

A test forum is available for your study at the link above.

If you are not already registered, you can request a membership by using the NewMars email process: newmarsmember@gmail.com

It would be helpful to receive feedback on the new forum layout.  We are making excellent progress in restoring FluxBB 1.5.11 to run on modern underpinnings. Only a small change by SpaceNut is potentially able to put us over the top.

If that happens, our webmaster (kbd512) will have the option of updating the software we are currently using, instead of moving to an entirely new forum package.

Please look at the structure set up in the phpBB3 forum.  We have the opportunity to introduce some or all of the changes into the existing forum.

SpaceNut is currently learning how to manage the new forum.  What SpaceNut learns is largely transferable to the existing environment.

(th)

Offline

Like button can go here

#31 2024-04-24 06:47:59

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut ... While the phpBB3 site is available, please learn how to create a new Category.

It is not as simple as creating a new topic, but we need new categories in the FluxBB system, and at present, you may not know how to create one.

I cannot know (of course) if there are similarities or differences between phpBB3 and FluxBB in creating a new topic, but if you learn how to create one in phpBB3 where it is safe to experiment, you might be able to create one in FluxBB NewMars.

RobertDyck has shown some interest in having a category dedicated to Large Ship.

In addition, I would like to see the other new categories we are showing in phpBB3.

With recent progress in restoring the FluxBB clone to full operation, webmaster kbd512 will have the option of simply upgrading the FluxBB we have and continuing with the current forum.  This would be a ** lot ** less work than migrating to an entirely different forum.

There is another advantage ... FluxBB is no longer being maintained. That means we are free to make our own changes and improvements, and there will be no new version from outsiders wanting to replace it.

There are many improvements we could make. An example is counting views of posts done by real people, instead of by hackers as we have now.

We have long wanted a "Like" feature, and we could certainly implement that.

The "Like" feature would require a new column in the Posts table, and a bit of code to show the "Like" button on the Posts display.

***
On the other hand, phpBB3 ** has ** been improving steadily over the past 10 years, and it is enhanced with many interesting new capabilities.

Back on the first hand, FluxBB is familiar to everyone who is currently active, so it might be worth keeping for that reason alone.

In any case, please learn how to create a new category!

The key difference is that a new category is a kind of forum that has no parent, but it does need permissions, so you can use Meta New Mars for the permissions.  I am pretty sure you also need to turn (ON) the option to allow posts to the new category. I think that option is about half way down the Admin page for a new category.

(th)

Offline

Like button can go here

#32 2024-04-24 09:48:47

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut re experiments on phpBB3...

Re: Junk topic
Post by SpaceNut » Tue Apr 23, 2024 2:35 am

I was able to delete my other username and posts.

It seems that most things to be done are not simple but are layered.

Thanks for your report(s) as you try out the various features of phpBB3!

The one I am most interested in is the creation of a new Category.

Because a Category is at the top level, it has no parent. However, it may need permissions, and you can copy Meta New Mars as a model.

In addition, the new Category needs to be set to allow new topics (about half way down the list of options).

Finally, the new Category needs at least one topic so it will show up.

If you are still interested in home sized Thermal Energy Storage, please consider creating a Category for that, and a topic for a particular category such as New Hampshire, or Texas, or the UK (Calliban has recently suggested some locations).

Once the Category has been created by an Admin, including the first topic, then Regular Members can create more topics.

***
For all current/active NewMars members ... we will leave the phpBB3 site up for you to explore for a while. If you would like an account there, just write newmarsmember@gmail.com. Please include the username you want. An Admin or Moderator will write back with a temporary password. Please change the password immediately after logging in, and please post something so we know you've arrived.

If there is someone in the NewMars audience who is not currently a member and who would like to be, please follow the same steps but clarify that you are not currently a member.

(th)

Offline

Like button can go here

#33 2024-04-24 17:31:15

SpaceNut
Administrator
From: New Hampshire
Registered: 2004-07-22
Posts: 30,839

Re: phpBB3 Lifeboat Forum on Azure

Making first attempty but its being real slow.
https://www.hostknox.com/tutorials/phpb … and-forums

Bot understanding I password protected it rather than it being open to all.

Something more to learn how to do.

update
changing the forum password was quite easy in the manage forum functions.
even created a first simple topic in the category.

Offline

Like button can go here

#34 2024-04-27 08:52:03

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut re #33

It is Saturday and I am just now catching up with your experiments ... You didn't say but I'm guessing you were working in phpBB3.

Please try to create a new category for large Ship in the clone!  (and don't password protect it << grin >>)

***
I logged in just now to update the procedure to add a new member to phpBB3...

The procedure is the same as before .... the difference is used two computers to speed up the process.

I enabled registrations on the first computer, Registered NewUser on the second, and while still logged in as Admin, turned off registrations. That meant the registration was only open for a few seconds.

The new account was created for NewMarsMember, to update the Recruiting topic.

As a reminder to all NewMars members (current/active and those who are less active) ... the phpBB3 test forum is available for you to evaluate the package. It is a candidate for upgrade.   Upgrade of our existing FluxBB is in progress but the option of changing to phpBB3 remains open.

See the link at the top of this topic to open the phpBB3 forum.  If you would like to try it out, SpaceNut or I (or kbd512 or RobertDyck) can create an account for you. Just post here or write to newmarsmember@gmail.com.

(th)

Offline

Like button can go here

#35 2024-04-27 11:28:01

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut re new Category in phpBB3

Congratulations on creation of your first Category ...

HOME ENERGY PROJECTS
TOPICSPOSTS
LAST POST
Concrated solar power thermal creation
Refective forms Heliostats, solar troughs, flat panel or evaporated tube1Topics1Posts
Last postShiny parabolic or mirror use
by SpaceNut View the latest post
Thu Apr 25, 2024 12:24 am

Now please see if you can do the same thing in the clone ...

Right now, the clone has the same Categores as the NewMars forum at Mars Society.

The last one is Archive.

Your new Category will come under Archive, unless you move it up, which you may be able to do.

I recommend you try to create a Projects category. Home Heating can be a forum under Projects.

(th)

Offline

Like button can go here

#36 2024-04-27 12:33:14

SpaceNut
Administrator
From: New Hampshire
Registered: 2004-07-22
Posts: 30,839

Re: phpBB3 Lifeboat Forum on Azure

Seemed easy in the clone but everything is so hidden and layered in the phpbb3.

I see that the category functions are given to the sites admin or webmaster and not to the lower level admins.

will just need more references for how to do when working with it.

Offline

Like button can go here

#37 2024-04-27 18:02:31

SpaceNut
Administrator
From: New Hampshire
Registered: 2004-07-22
Posts: 30,839

Re: phpBB3 Lifeboat Forum on Azure

I am unable to log into the phpbb3 board and the I forgot does not seem to be working.

Offline

Like button can go here

#38 2024-04-27 20:10:39

SpaceNut
Administrator
From: New Hampshire
Registered: 2004-07-22
Posts: 30,839

Re: phpBB3 Lifeboat Forum on Azure

I think the category are set correctly now as I went into the admin control panel and selected the manage forums, selected the edit for the project followed by setting the permissions to same as meta. It was slow so its not known it\f the same changes worked for the home energy.

Will see if they can be updated tomorrow.
Good night hopefully the weather will be fair as I am doing the back brake pads on the Volvo.

Offline

Like button can go here

#39 2024-04-27 20:34:37

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

Best wishes for good weather for the brake pads replacement!

Folks out in Iowa are having some severe weather.  So far no one has died, but there's a lot of property damage.

***
Thanks for the good news you've been working on the Category on phpBB3... The more practice you get in a safe environment, the more confident you will be when you tackle the setup in the Mars Society NewMars.
***
I got a break!  The Azure connection opened up long enough for me to insert the changed lines into admin_groups.php.

Please try it the next time you get a chance... (perhaps after the brake pads?)...

I don't expect the changes we made to make much of a difference, but they might.  According to ChatGPT4, the changes from PHP 7.4 to the version we are running now allowed a lot of time but 10 years is probably pushing things. 

If the program still doesn't work, please capture as much information as you can.

Plus!  If kbd512 has a chance to look at it tomorrow,  anything you observer would be helpful.

I'll take a look at the Search now. For that I'll be working on the development PC.

(th)

***
I think I've commented how difficult it is to keep three nearly identical forums running at the same time, as I've been doing recently.

I have to ** really ** pay attention when I'm in the real NewMars because the clone is now almost identical

Offline

Like button can go here

#40 2024-04-28 08:35:05

SpaceNut
Administrator
From: New Hampshire
Registered: 2004-07-22
Posts: 30,839

Re: phpBB3 Lifeboat Forum on Azure

Have come it for a bite of cereal for fuel for the body while taking a break due to rain down pour as I finished the first side of the car.

Will definitely look at the forums's as it sort of fun to learn programing diagnosing once more.

Offline

Like button can go here

#41 2024-05-17 06:26:34

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

For SpaceNut re #40

Best wishes for success with the car project.

Rain is abundant these days.  Our friends in Texas have seen more than they need, and it sounds as though your area has plenty as well.

Thanks for continuing to experiment with the phpBB3 system.  It is still ** out there ** as an option, but renovation of FluxBB is looking better and better as we close in on the finish line.

(th)

Offline

Like button can go here

#42 2024-11-30 19:46:19

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

for all NewMars members....

During the year and a bit more that we've been working on the FluxBB upgrade, we created a demonstration phpBB3 site.

The phpBB3 site was evaluated, and eventually the decision was made to stay with the FluxBB system we have now, and to upgrade it to 2024 standards.

Meanwhile, the phpBB3 site is still working well.

I have decided to use it as a way to inform our members of the status of the conversion.

To see the current status, just click on this link:

http://40.75.112.55/phpBB3/viewtopic.php?t=28

You will not be able to log into the phpBB3 system unless you took part in the evaluation, which several members did.

I will try to update the new topic when I have time.

Since kbd512 will be doing the work, I should have time to report on progress.

(th)

Offline

Like button can go here

#43 2024-12-01 07:17:18

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

for all NewMars members....

Our phpBB3 test site will be used to provide updates during the conversion:

To see the current status, just click on this link:

http://40.75.112.55/phpBB3/viewtopic.php?t=28

You will not be able to log into the phpBB3 system unless you took part in the evaluation, which several members did.

I will try to update the new topic when I have time.

(th)

Offline

Like button can go here

#44 2024-12-01 10:57:55

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

tahanson43206 wrote:

for all NewMars members....

Our phpBB3 test site will be used to provide updates during the conversion:

To see the current status, just click on this link:

http://40.75.112.55/phpBB3/viewtopic.php?t=28

You will not be able to log into the phpBB3 system unless you took part in the evaluation, which several members did.

I will try to update the new topic when I have time.

(th)

Offline

Like button can go here

#45 2026-01-10 19:22:20

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

The last entry in this topic was created in 2024... The phpBB3 package was subsequently installed as our new image server.

I ** just ** learned today that that package has an option to store pdf's such as student papers.

Here is part of a conversation with Gemini that covers the setup procedure:

Yes! Please do show me how to set up that capability! I had no clue! We'd been using the package for over a year, primarily for consideration as an alternative to our existing older system. We ended up upgrading the older system because everyone likes it, but we decided to keep the phpBB3 as an image server. Your "discovery" that we can store pdf's as well is most encouraging.
***
This is a fantastic "aha!" moment for your project. Since you already have the infrastructure in place, you are essentially just turning the key in a lock that was already there.

Setting this up will transform your "image server" into a "knowledge vault" without requiring any new software or server costs.
How to Enable PDF Storage in phpBB3

To get your PDF repository running, follow these steps in your phpBB3 Administration Control Panel (ACP):

1. Enable the "Documents" Extension Group

By default, phpBB often restricts attachments to images to save space. You need to tell it that PDFs are welcome.

    Go to the ACP.

    Click on the Posting tab.

    In the left-hand menu, under Attachments, click Manage extension groups.

    Look for the group named Documents. Click the green gear icon (Edit) or the "Settings" link next to it.

    Ensure Allowed is set to Yes.

    Under Category, make sure Document is selected.

    Click Submit.

2. Verify the .pdf Extension

    Back in the Posting tab, click Manage extensions.

    Scroll down to find pdf.

    Ensure it is assigned to the Documents group you just enabled. If it isn't listed, you can add it at the top of the page (Extension: pdf, Extension group: Documents).

3. Adjust File Size Limits

Since engineering papers and "lifetime" notes can be larger than simple images, you may need to increase your capacity.

    Go to Attachment settings in the left menu.

    Look for Maximum file size. (Setting this to 0 makes it unlimited, but usually, 10MB or 20MB is plenty for a PDF).

    Look for Total attachment quota. This is the "bucket" for the whole forum. Since you have a sponsor, ensure this is set high enough to accommodate a "lifetime" of uploads.

The "Librarian's Secret": Metadata Search

Because your forum stores words in a database table for search, the "File Comment" field is your best friend. When a user uploads a PDF, phpBB provides a text box for a comment.

Instruct your members to paste their paper's Abstract or a list of Keywords into that comment box. Your existing search tool will index those words. Even if the tool can't "read" inside the PDF, it can "read" the description the student wrote about it. This bridges the gap between the 2002 search technology and 2026 file storage perfectly.

Why this fits the "Mars Legacy"

By using the "comment" feature as a metadata tag, you are creating exactly what Vannevar Bush envisioned: a way to find a needle in a haystack.

Imagine a young member in 2026 uploading a paper on Centrifugal Gravity. By adding a comment like "Initial concepts for a rotating habitat, 2026," they ensure that a settler in 2050 can find that specific "tidbit" using the same old search tool you've had since 2002.

Next Steps for Your Team

Since you are the junior admin, you might want to perform a "Proof of Concept."

Would you like me to help you draft a "User Guide" post for your members that explains exactly how they should upload their first "Lifetime PDF" and what kind of comments they should leave to make it searchable?

I'll leave this post here for a few days, to see if anyone has an opinion one way or another.

The only persons who can upload files are persons who are already members of this forum.

It is possible none of our current members would need this capability. However, if we attract young people who are building their careers, they might be interested in the ability to "publish" for posterity.


(th)

Offline

Like button can go here

#46 2026-01-10 19:34:33

SpaceNut
Administrator
From: New Hampshire
Registered: 2004-07-22
Posts: 30,839

Re: phpBB3 Lifeboat Forum on Azure

Much like the images the attachment can be any file format. So all documents can be kept even if we do not own them by this space on our servers. The any thing that we link directly can be updated for our saved copy instead reducing dead links.

Offline

Like button can go here

#47 2026-08-12 06:25:27

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

In August of 2026, Microsoft announced a new security policy for Azure accounts.

Since the NewMars lifeboat is one of many accounts to be affected by this new policy, this post and later ones will attempt to share the new policy with NewMars members.

Passkeys by default and retirement of Microsoft-provided SMS and voice authentication

Microsoft <microsoft-noreply@microsoft.com>
Tue, Aug 11, 3:49PM (16 hours ago)

Microsoft header logo

Move to phishing-resistant authentication before SMS and voice retire

We are notifying all Microsoft Entra ID tenants of an important change to authentication security: The AI era demands stronger, phishing-resistant authentication. Passkeys are becoming the default authentication experience in Microsoft Entra, and Microsoft-provided SMS and voice authentication will retire on February 1, 2027.

For more context on why Microsoft is moving to phishing-resistant authentication by default, please read our Microsoft Security Blog announcement.

What is changing

Passkeys become the default authentication experience for users currently enabled for SMS or voice.

Microsoft-provided telecom delivery for SMS and voice will be retired. Customer-managed telecom providers configured through the Microsoft Security Store are not affected.

Why this is changing

SMS and voice are among the most vulnerable authentication methods available today and provide significantly weaker protection against phishing, SIM-swap, and replay attacks than passkeys. Moving to phishing-resistant methods gives your organization stronger security by default.

Impact on you and key dates

September 1, 2026 — Users enabled for SMS or voice are automatically enabled for passkeys and will be nudged to register a passkey when they next complete MFA. (If you do not want this, move users out of SMS or voice in the Authentication Methods Policy before this date.)

February 1, 2027 — Microsoft-provided SMS and voice are fully retired in Microsoft Entra ID. Customer-managed telecom providers are unaffected.

After February 1, 2027 — Users whose only available MFA method is SMS or voice will receive a blocking prompt to register a passkey before they can continue signing in. There is no opt out from this enforcement; it applies to all tenants.

If no users in your tenant are enabled for SMS or voice, no action is required and you can disregard the steps below.

If you do have users enabled for SMS or voice, the required action is to move every one of those users off SMS and voice before February 1, 2027. Microsoft recommends passkeys — the default phishing-resistant credential in Microsoft Entra ID. Take the following steps:

Find affected users. Identify who in your tenant is still enabled for SMS or voice.

Move users to passkeys. Enable passkeys and run a registration campaign to drive adoption at scale before auto-enablement on September 1, 2026.

Communicate the change. Notify your users of what is changing, when, and the action they need to take.

Evaluate a telecom provider only if required. If you have a regulatory or operational need to keep SMS or voice, configure a customer-managed provider through the Microsoft Security Store before February 1, 2027 (provider options and pricing published beginning September 18, 2026; configuration available beginning October 30, 2026).

The bottom line: every SMS and voice user must be on a phishing-resistant method — passkeys are recommended — before Microsoft-provided SMS and voice retire on February 1, 2027. Acting before September 1, 2026 lets you move users on your own schedule and avoid blocking prompts.

     Read migration guidance >   

Privacy Statement

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

Microsoft footer logo

It appears that something called a "passkey" is required.

(th)

Offline

Like button can go here

#48 2026-08-12 06:29:13

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

This post was generated by clicking on a button shown in Post #47 <Read migration guidance>

https://learn.microsoft.com/en-us/entra … retirement

Passkeys by default and retirement of Microsoft-provided SMS and voice authentication

Summarize this article for me
To help enterprises adopt AI at scale, it is imperative for users to use secure authentication and move from phishable authentication methods to phishing-resistant authentication methods like passkeys. Therefore, Microsoft Entra ID is making passkeys the default sign-in experience, so every organization gets phishing-resistant security by default. SMS and voice are no longer positioned as secure authentication methods and will no longer be provided natively in Entra ID.

Starting September 1, 2026, passkeys become the default authentication experience and will be automatically enabled for users enabled for SMS or voice. From February 1, 2027, Microsoft-provided telecom delivery for SMS and voice will be retired; customers who still require these methods should configure customer-managed providers through the Microsoft Security Store. More information on customer-managed telecoms coming September 18th, 2026.

Users who already sign in with passkeys, Windows Hello for Business, or another phishing-resistant method can continue using those methods. However, users who remain enabled for SMS or voice may still receive prompts to register passkeys on eligible devices. To check who in your tenant still uses SMS or Voice, see Find active SMS or Voice users in your tenant.

Retirement timeline
Date    Milestone    What you should do
September 1, 2026    Tenants with users enabled for SMS or voice, those users are auto-enabled and nudged for Passkey registration upon MFA sign-in.    Notify end users of the changes happening. Use the passkey deployment guide to prepare your environment for passkey use.
February 1, 2027    Microsoft provided SMS and Voice fully retired in Microsoft Entra ID    Make sure every user is on a phishing-resistant method (passkeys, Windows Hello, or FIDO2) before this date, or users may experience sign in disturbances.
After February 1, 2027    Users whose only available MFA method is SMS or voice will be required to register a passkey during sign-in to continue accessing their account. This prompt will be blocking. Users must register a passkey before they can continue to sign in to their account.
There is no opt out from this February 1 behavior. It will be enforced for all tenants.    Migrate users to a phishing-resistant method or choose a telecom provider to continue using SMS or voice.
Prepare for transition to passkeys
1. Find users enabled for SMS or Voice
Microsoft recommends that you identify which users are enabled for SMS or Voice, before you plan your migration. Use the following steps to find each group.

To find users enabled for SMS or Voice, run this PowerShell script. Ensure you have one of global reader, Authentication policy administrator, or Security reader roles enabled.

2. Move users to passkeys
Passkeys are the default phishing-resistant credential for Microsoft Entra ID. They're tied to a device or a synced credential store, use cryptographic keys instead of shared secrets, and are resistant to phishing, SIM-swap, and replay attacks.

Microsoft Entra ID supports two types of passkeys:

Synced passkeys — passkeys saved to a platform credential manager (such as iCloud Keychain, or Google Password Manager) and synced across the user's devices. Best for users who already use a platform credential manager.
Device bound passkey — the passkey is created and stored on a user's device, such as Passkey in Microsoft Authenticator, Entra Passkey on Windows, FIDO2 hardware security key, and so on.
To enable passkeys for your tenant and plan your rollout, see Plan a passkey deployment in Microsoft Entra ID and Enable passkeys (FIDO2) for your organization.

To view the full list of passwordless authentication methods that Entra ID supports, see Microsoft authentication overview.

Important

On September 1, 2026, users enabled for SMS or Voice in the Entra Authentication Methods Policy (AMP), or in legacy MFA settings, will be auto-enabled for passkeys in AMP. These in scope users will be put into a passkey profile allowing all types of passkeys. Your Registration Campaign settings will be set to Microsoft Managed state targeting passkeys, and will automatically bring these users into scope.

When these users next sign-in and complete MFA, the registration campaign will nudge them to register a passkey. By default, users will have unlimited snoozes of the nudge prompt. If you do not want this to occur, move users out of SMS or Voice in AMP before September 1st.

Proactively drive adoption with a registration campaign
You can enable a passkey registration campaign before it is automatically enabled for your SMS and Voice enabled users on September 1, 2026. A registration campaign prompts users to set up a passkey the next time they sign in and complete MFA. It's the most effective way to move users off SMS and Voice at scale without adding help-desk load.

Before configuring the registration campaign, ensure Passkey (FIDO2) is enabled as an authentication method and that your SMS/Voice users are included in a passkey-enabled authentication methods policy.

To configure a registration campaign for passkeys:

Sign in to the Microsoft Entra admin center as an Authentication Policy Administrator.
Go to Entra ID > Authentication methods > Registration campaign.
Set State to Microsoft Managed and target the security group of SMS and Voice users you created in step 1.
3. Evaluate a telecommunications provider in the Security Store for operational needs
Microsoft recommends passkeys as the primary migration path for all users where possible. If you operate in a regulated industry or have an operational need for a telecoms channel — for example, specific compliance regimes that require an out-of-band SMS, or scenarios where no other method is workable — you can use a telecom provider available through the Microsoft Security Store for those user segments.

Identify the specific user segments where you have a genuine regulatory or operational need for a telecoms channel. Document the requirement (which regulation, which scenario).
Beginning September 18th, 2026, review the telecom providers and related information available through the Microsoft Security Store to evaluate which option best meets your regional and compliance requirements.
Beginning October 30, 2026, customers who need to continue using SMS or voice will be able to select and configure a telecom provider from the Microsoft Security Store.
Stand up the carrier contract through the marketplace flow and test with a pilot group before broad rollout.
For every other user segment in your tenant, default to passkeys.
4. Communicate the change to your users
With passkeys enabled in your tenant, give your users clear notice of what's changing, when, and what they need to do before you start driving registration. Coordinated communications are the single biggest predictor of a smooth passkey rollout.

Microsoft recommends a phased communication plan aligned with the retirement timeline:

Awareness — announce that SMS and Voice are retiring, explain why, and tell users which method they'll move to.
Action — direct users to register a passkey, with step-by-step guidance for their device type (Windows Hello, iOS, Android).
Reminder — remind users who haven't yet registered a phishing-resistant method on the actions they should take.
Use end-user communication templates for email, Teams, and employee communications portals. Microsoft recommends that you scope your messaging to the security group of SMS and Voice users you created in step 1, so the right people hear from you at the right time.

5. After retirement
Beginning February 1, 2027, Microsoft-provided SMS and voice delivery will be retired in Microsoft Entra ID.

If your tenant still has users enabled for SMS or voice and you have not configured a customer-managed telecom provider through the Microsoft Security Store, those users will no longer be able to use SMS or voice to complete MFA and sign in as usual.

After this date, users whose only available MFA method is SMS or voice will be required to register a passkey during sign-in to continue accessing their account. This prompt will be blocking. Users must register a passkey before they can continue signing into their account.

There is no opt out from this February 1 behavior. It will be enforced for all tenants.

To avoid sign-in disruption, make sure users register a passkey or move to another phishing-resistant authentication method before February 1, 2027. If your organization has a valid business, regulatory, or operational need to keep using SMS or voice, configure a customer-managed telecom provider before this date.

Temporarily opt out of the automatic passkey enablement
A temporary opt-out is available for the September 1, 2026 through February 1, 2027 changes. This lets you delay passkey and Registration Campaign enablement while you complete transition activities, such as configuring customer-managed telecom providers or migrating to other authentication methods.

To opt out, you need the Microsoft Graph Policy.ReadWrite.AuthenticationMethod permission. Update your authentication methods policy using Microsoft Graph and set the passkeyDynamicMigration property to true.

Request

HTTP
PATCH https://graph.microsoft.com/beta/polici … hodspolicy
Content-Type: application/json

{
   "optOutSettings": {
     "passkeyDynamicMigration": true
   }
}
After this setting is applied, your tenant is excluded from the automatic passkey enablement and Registration Campaign rollout during the opt-out period. Beginning February 1, 2027, standard passkey migration and enforcement timelines apply regardless of this setting.

If your tenant still has users enabled for Microsoft-managed SMS or voice on February 1, 2027, and you haven't configured a customer-managed telecom provider through the Security Store, those users can no longer use SMS or voice to satisfy MFA requirements and continue signing in.

There is no opt out for the February 1, 2027 enforcement. This requirement applies to all tenants.

Frequently asked questions
For answers to common questions about the SMS and voice retirement, telecom providers, opt-out options, and passkey migration, see Frequently asked questions about SMS and voice retirement.

Related links
What are authentication methods?
Plan a passkey deployment
Authentication methods activity report
Note: The author created this article with assistance from AI. Learn more
Additional resources
Documentation

Plan a phishing-resistant passwordless authentication deployment in Microsoft Entra ID - Microsoft Entra ID

Detailed guidance to deploy passwordless and phishing-resistant authentication for organizations that use Microsoft Entra ID.

Get started with a phishing-resistant passwordless authentication deployment in Microsoft Entra ID - Microsoft Entra ID

Detailed guidance for planning the prerequisites to deploy passwordless and phishing-resistant authentication for organizations that use Microsoft Entra ID.

Overview of Conditional Access Authentication Strengths - Microsoft Entra ID

Learn how admins can use Microsoft Entra Conditional Access to distinguish which authentication methods users can use based on relevant security factors.

Show 5 more
Last updated on 08/10/2026
In this article
Retirement timeline
Prepare for transition to passkeys
Temporarily opt out of the automatic passkey enablement
Frequently asked questions
Related links
Was this page helpful?

(th)

Offline

Like button can go here

#49 2026-08-12 06:45:32

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

This post is intended to contain links to Microsoft learning resources.

<What are authentication methods?>
https://learn.microsoft.com/en-us/entra … entication

<Plan a passkey deployment>
https://learn.microsoft.com/en-us/entra … entication

The document above includes a list of operating systems that support the new authentication methods.

<Authentication methods activity report>
https://learn.microsoft.com/en-us/entra … s-activity

In reviewing the documents above, I get the sense that governments as well as corporations are going to be impacted by these changes. I have no idea how many customers Microsoft may have world wide, but the number may be in the millions.

(th)

Offline

Like button can go here

#50 2026-08-12 07:24:02

tahanson43206
Moderator
Registered: 2018-04-27
Posts: 25,673

Re: phpBB3 Lifeboat Forum on Azure

In this post we have an estimate from Gemini of how many customers are likely affected by the Microsoft security rollout.

Broader Context: Active Directory / Entra ID
If you count all entities using Microsoft's underlying cloud identity system—Microsoft Entra ID (formerly Azure Active Directory)—which underpins both Azure infrastructure and Microsoft 365, the number jumps drastically to over 700,000 organizations and hundreds of millions of user accounts globally.

Because Microsoft enforces security policies—such as the mandatory Multi-Factor Authentication (MFA) rollouts—at the Entra ID tenant level, nearly every organization using Microsoft's enterprise ecosystem is affected by these identity and authentication deadlines.

(th)

Offline

Like button can go here

Board footer

Powered by FluxBB