Recorded 26 Oct 2026 at 06:24 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
Microsoft Graph announcementMicrosoft Graph changelog
Identity and access (v1.0): 1 API change passage
Added multi-factor authentication (MFA) requirement for self-service operations for supported authentication methods. Starting January 26, 2026, users who manage their own authentication methods through self-service operations, such as adding, updating, or deleting phone numbers and email addresses, must complete multifactor authentication (MFA) if they last authenticated more than 10 minutes ago in the current session. For more guidance on handling this change in your application, see Microsoft Entra authentication methods API overview.