This week’s most actionable change is in Microsoft Entra ID: Microsoft-provided SMS and voice authentication is scheduled to retire for most users on February 1, 2027. Admins should begin moving affected users to passkeys or another suitable method, while organizations that still require telephony should plan for a customer-managed provider.
The remaining updates focus on Copilot and admin visibility: mobile Excel editing, better-fit Copilot modes, connected Agent 365 agents, DoD analytics, and upcoming changes to Authenticator backup, Entra MFA, and Purview DSPM.
Copilot and productivity
Edit with Copilot in Excel on iPhone
What changed: The Message Center update describes natural-language editing and task continuation in Excel on iPhone, with rollout expected worldwide from late October through November 2026.
Who should care: Organizations whose users review or update workbooks from iPhones.
Admin takeaway: Track the rollout in the Microsoft 365 admin center, then test the experience with representative mobile users. Review data-access and mobile-app policies before recommending it for sensitive workbooks.
Source: Microsoft 365 Message Center archive, MC1528003. Confirm tenant-specific availability before communicating a firm date.
Copilot app mode handoffs
What changed: Microsoft plans to show a suggestion card in Copilot Chat when another supported mode, such as Cowork, appears to fit the prompt better.
Who should care: Microsoft 365 Copilot users and the teams that support them.
Admin takeaway: Prepare users for the new handoff pattern and update internal guidance so a mode suggestion is understood as a workflow choice, not an error or an unexpected escalation.
Viva Insights and Copilot Analytics in DoD
What changed: The roadmap entry describes Viva Insights and Copilot Analytics coming to the Microsoft 365 Department of Defense environment, with role-based and privacy-protected views of Copilot adoption, usage, and impact.
Who should care: Eligible DoD organizations using Microsoft 365 Copilot.
Admin takeaway: Coordinate with compliance, privacy, and reporting owners before enabling or promoting analytics. Confirm eligibility and availability in the relevant cloud environment.
Use Agent 365 agents as connected agents in declarative agents
What changed: The Message Center update describes support for Microsoft Agent 365 agents that use the Agent2Agent protocol as connected agents in declarative agents.
Who should care: Teams building or governing declarative agents.
Admin takeaway: Review the approval and governance path in the Microsoft 365 admin center. Treat connected-agent permissions, data access, and ownership as part of the design review before rollout.
Source: Microsoft 365 Message Center archive, MC1478975. Confirm the supported configuration in your tenant before implementation.
Security and administration
Microsoft-provided SMS and voice authentication retirement
What changed: Microsoft-provided SMS and voice authentication is scheduled to retire for most users on February 1, 2027. Global Administrators and external users follow a later July 1, 2027 date; internal guest users remain in the February 1 group.
Who should care: Any tenant still relying on Microsoft-provided SMS or voice for MFA or self-service password reset.
Admin takeaway: Inventory affected users, move them to passkeys or another appropriate method, and test registration and recovery. If SMS or voice remains necessary for a legitimate business, regulatory, or technical reason, evaluate a supported telephony provider through Microsoft Security Store.
Authenticator backup and restore changes on Android
What changed: Microsoft’s support guidance says Android backup is moving to Google One starting in January 2027. Work or school account credentials are not backed up; only the account name is retained and users must register the account again after restore.
Who should care: Android users and help-desk teams responsible for Microsoft Authenticator recovery.
Admin takeaway: Update support documentation, explain the work/school-account limitation, and test the recovery process on managed Android devices before the change reaches users.
Windows Hello for Business and macOS Platform SSO as standalone MFA factors
What changed: The Message Center update describes Windows Hello for Business and macOS Platform SSO being recognized as standalone MFA factors, with rollout expected from early November 2026.
Who should care: Organizations using Entra MFA with Windows Hello for Business or macOS Platform SSO.
Admin takeaway: Review authentication-strength and onboarding documentation. Validate the behavior in a pilot group before changing user guidance or removing any fallback method.
Source: Microsoft 365 Message Center archive, MC1450134. Confirm rollout and policy behavior in your tenant.
Purview DSPM classic experiences are retiring
What changed: Microsoft plans to retire the classic Data Security Posture Management and DSPM for AI experiences by late January 2027 and consolidate capabilities in the current DSPM experience.
Who should care: Organizations using either classic DSPM experience for posture management, reporting, or investigations.
Admin takeaway: Identify dependencies, compare the current experience with existing workflows, and schedule a transition before the retirement window.
Source: Microsoft 365 Message Center archive, MC1481315. Confirm the retirement milestone and feature parity in your tenant.
Editor’s note
The five Message Center items in this digest are linked to an archive mirror because the public Message Center pages are tenant-authenticated. Dates and availability can vary by tenant, cloud, and license. Use the linked Microsoft 365 admin center messages as the final operational source before taking action.
Sources
- Microsoft Authenticator: Improved backup and restore experience for Android
- Microsoft Excel: Edit with Copilot in Excel on iPhone
- Microsoft Entra ID: Reminder to migrate from Microsoft-provided SMS and voice authentication
- Microsoft Copilot (Microsoft 365): Copilot app mode handoffs
- Microsoft Viva: Insights and Copilot Analytics in DoD
- Microsoft Entra: Windows Hello for Business and macOS Platform SSO as standalone MFA factors
- Microsoft Purview: Retirement of DSPM classic and DSPM for AI classic experiences
- Microsoft 365 Copilot: Use Microsoft Agent 365 agents as connected agents in declarative agents
Spotted an error? See corrections. How this site works: editorial policy.