Before Microsoft-provided SMS and voice retire, know who is passkey-ready, as a group
Microsoft has put a date on something a lot of us have been meaning to get to. Passkeys are becoming the default, and Microsoft is retiring its own delivery of the SMS and voice codes, so Microsoft stops sending the text and the phone call. So the question stops being "should we move people off text-message codes" and becomes "who is still on one, and can we see that list today."
We needed an honest answer to that, as a thing we could act on and not just a number in a dashboard. Not just a count of how many people are on phone-based MFA, but the actual users, split by how strong their method really is, kept current, and sitting in groups we can point a Conditional Access policy or a comms campaign at. This is the read-only runbook we built to produce that, and the way it keeps the groups in sync without ever being allowed to break anyone's sign-in.