SMS Gateway for Microsoft Entra
Keep SMS Authentication Available Where You Still Need It
The Problem
Starting September 1, 2026, passkeys become the default authentication experience for users enabled for SMS or voice. Starting February 1, 2027, Microsoft-provided telecom delivery for SMS and voice will be retired. For many organizations, this is an opportunity to move more users toward phishing-resistant authentication. However, some environments may still depend on SMS for specific users, applications, operational processes, or regulatory workflows. Organizations that need to preserve those use cases require a secure way to continue SMS-based verification without replacing Microsoft Entra or creating a separate identity platform.
The Solution
Credenti SMS integrates with Microsoft Entra as an External MFA method. Users continue to authenticate through Microsoft Entra. When additional authentication is required and Credenti SMS is available to the user, they can select it as their MFA method. Microsoft Entra securely redirects the authentication session to Credenti. During the authentication transaction, Credenti dynamically retrieves the user's phone number from Microsoft Entra and sends a time-limited one-time passcode by SMS. The user enters the code with Credenti. After successful verification, Credenti returns the authentication result to Microsoft Entra, which continues evaluating access policies and completes the sign-in. Microsoft Entra remains the identity authority and source of truth for the user's phone number. Credenti handles the SMS verification experience.
Where It Matters
Legacy & Business-Critical Workflows
Continue supporting applications and processes that still depend on SMS verification.
Users Transitioning to Passkeys
Maintain SMS for selected users who cannot immediately move to phishing-resistant authentication.
Regulatory & Operational Requirements
Support defined workflows where telecommunications-based verification remains necessary.
Authentication Modernization
Move most users toward stronger authentication while gradually reducing legacy SMS dependencies.
The Credenti Differentiator
Native External MFA Integration
Credenti participates directly in the Microsoft Entra authentication flow using Microsoft’s External MFA architecture.
Less Than 30-Minute Deployment
Configure and enable Credenti SMS in less than 30 minutes for a fast path to continued SMS authentication.
Entra Remains the Identity Authority
Microsoft Entra continues to control identity, primary authentication, Conditional Access, application access, and authorization decisions.
No Phone Number Storage
Credenti dynamically retrieves the required phone number from Microsoft Entra during authentication without storing it within Credenti.
No Number Synchronization
There is no separate phone directory to populate, synchronize, or maintain within Credenti. Microsoft Entra remains the source of truth.
No Separate SMS Enrollment
Users do not need to register or maintain a second phone number in Credenti for SMS delivery.
Managed SMS Delivery
Credenti manages the SMS verification experience, including OTP generation, delivery, and validation.
Selective Deployment
Keep SMS available for the users and workflows that require it while moving others toward passkeys and phishing-resistant authentication.
How It Works
