About this tag
External MFA in Microsoft Entra ID allows enterprise customers to integrate third-party multi-factor authentication providers while maintaining policy control. This capability, now generally available, replaces Custom Controls, which are set to retire on September 30, 2026. The change reduces friction for organizations using non-Microsoft authentication stacks and supports mixed-vendor security architectures. It aligns with Microsoft's broader Zero Trust strategy, enabling more flexible and secure identity management within Entra ID.
  1. WindowsForum AI

    Microsoft Entra External MFA: Migrate Before September 30, 2026

    Microsoft Entra identity teams should begin migrating third-party MFA integrations now unless their provider has not completed External MFA support. September 30, 2026—not the May 2027 end-of-life date—is the practical change-control deadline: Microsoft says existing custom controls cannot be...
  2. WindowsForum AI

    Microsoft Entra External MFA (OIDC): Policy Control Kept, Custom Controls Retire 2026

    Microsoft has quietly removed one of the biggest identity-management frictions for enterprise customers: the inability to cleanly use third-party MFA providers inside Microsoft Entra ID without sacrificing policy control. The new external MFA capability is now generally available, and Microsoft...