LAKEFOREST
Entra Passkey Services // Microsoft Entra ID

Which of your users will be stuck on 1 February 2027?

That day Microsoft stops delivering Entra ID sign-in codes by SMS and voice call. We find the users who depend on them, move them to passkeys and prove they actually sign in with them.

Discuss your passkey project See the offers
PASSKEY MIGRATION // STATUS SAMPLE
  • Users in scope 1,240
  • Still depend on SMS or voice 312
  • Passkey registered 640
  • Passkey in use 488
  • Done, old methods removed 402

152 users registered a passkey but never signed in with it. A readiness percentage would count them as done.

The problem

Turning passkeys on takes minutes. Moving your users takes a project.

Microsoft's defaults treat every user the same. Your users are not the same. Some work on a single device, some on several, some on shared PCs, and some manage your tenant. And a registered passkey is not a finished user.

Registered is not usedA readiness percentage counts registrations. It does not tell you who still signs in with an SMS or voice code every morning.
One answer for everyoneSingle-device users, multi-device users, shared PC users and admins need different methods. One setting and one email will not move all of them.
Nobody knows who is leftWithout a status per user, the team chases everyone again, and the last 10% surface on deadline day.
Three offers

Assess. Migrate. Guide and track.

Choose the one that fits where you are today. If you are not sure which one fits best, get in touch.

01 // ASSESSMENT

Entra Passkey Assessment

Fixed price EUR 2,500

See your sign-in methods the way you see your licences. Who has what, and who actually uses it.

  • Enabled, registered and actually used shown as three separate numbers, not one readiness percentage.
  • The users who would be stuck without SMS or voice codes, by name.
  • Single-device users, multi-device users, shared PC users and admins separated into groups that need different paths.
  • Onboarding and recovery gaps found before your helpdesk finds them.
  • A baseline to measure the migration against.
Start with an Assessment → Download the offer (PDF)
02 // MIGRATION

Entra Passkey Migration & Deployment

Starting from EUR 10,000

Retire SMS and voice codes the way you retire a server. Find who depends on it, move them, then switch it off.

  • We assess your current Entra ID state.
  • Single-device users, multi-device users, shared PC users and admins each get a method that fits how they work.
  • A pilot with real users before anyone else is affected.
  • Instructions written for each group, not one generic email.
  • "Done" is agreed before the rollout starts. The new method is in use and the old methods are handled.
  • At close you know who is finished, who is not and why.
Plan your migration → Download the offer (PDF)
03 // GUIDE & TRACK

Guided Enrollment & Migration Tracking

Price By scope

Track passkey adoption like a patch rollout. Every user has a status, and you chase only the ones left.

  • A status for every user, like a patch compliance report.
  • A user counts as done only after signing in with the new method.
  • Follow-up goes to the users who are left, not to everyone again.
  • Instructions for the user's own device and group, in the languages your people work in.
  • People complete the change on their own and ask for help only when stuck.
Discuss guided enrollment → Download the offer (PDF)
Where to start

Which option fits?

// START WITH THE ASSESSMENT IF

  • You cannot say today who still depends on SMS or phone calls
  • You need numbers for management before the budget decision
  • You do not know which user groups need a different path

// CHOOSE MIGRATION IF

  • You already know the users have to move, and want it done in one project
  • You need it configured, piloted and rolled out
  • You want a clear finish line before 1 February 2027

// ADD GUIDE & TRACK IF

  • You have too many users to walk through one by one
  • Several devices or user groups need different instructions
  • Your team is already chasing people from spreadsheets
The difference

Microsoft's default vs a planned migration.

Microsoft default

  • Same method offered to everyone
  • Tested in production
  • A generic registration prompt
  • "Done" means a passkey is registered
  • At the deadline, unclear who is left

Planned migration

  • Method chosen per user group
  • Pilot with real users first
  • Instructions written for each group
  • "Done" means the new method is in use
  • Remaining users and exceptions named
How a passkey project moves

From first look to switched off.

  1. Assess
  2. Design
  3. Configure
  4. Pilot
  5. Guide
  6. Migrate
  7. Verify
FAQ

Questions worth asking.

Is the Assessment part of the migration?

Yes. Every migration starts with the Assessment. We do not change a tenant we have not assessed.

Do our users need new hardware?

Usually not. Most users can use the laptop or phone they already have. Where security keys make sense, for example for admins, we tell you where and why.

Can we keep SMS and voice codes after 1 February 2027?

Only through a telecom provider that you contract and pay for yourself. Microsoft's own delivery ends and cannot be postponed. The Assessment shows whether any user group really needs it.

Contact

Start with a 30-minute call.

Tell us how many users you have and how they sign in today. We will tell you which of the three offers fits, or whether you need any of them.

We work remotely with teams worldwide, in English.

LakeForest Technologies

// Replies within one business day.