680: Microsoft Retires SMS/Voice MFA, Salesforce SSO Headaches, and SOC 2 Realities

Sam and Joe discuss Microsoft's plan to retire Microsoft-provided SMS and voice calls for MFA, with key dates of Sept 1, 2026 (users on SMS/voice are automatically enabled for passkeys and nudged to register) and Feb 1, 2027 (blocking enforcement for users whose only MFA is SMS/voice, no opt-out), noting paid/customer-managed telecom options and the need to warn clients, address legacy per-user MFA vs conditional access, and handle shared accounts via shared mailboxes or passkey-sharing tools. Sam recounts a prolonged Salesforce SSO/MFA issue worsened by poor vendor documentation and misleading AI guidance, ultimately tied to a Microsoft KB update. They then cover partnering with Fuji for client SOC 2 compliance support, emphasizing evidence, audits, costs, and ongoing maintenance, plus how cyber-insurance questionnaires drive security improvements. The episode also touches on residential support cases, Vision Pro support challenges with DRM blocking screen mirroring, and show wrap-up.

00:00 Show Kickoff

00:17 Microsoft MFA SMS Retirement

00:44 Key Dates and User Impact

03:28 Authenticator Backups and PSAs

04:40 Legacy MFA Cleanup Challenges

07:36 Conditional Access Licensing Risks

10:12 Shared Accounts and Passkeys

12:21 Salesforce MFA SSO Headaches

13:25 AI Missteps and Vendor Docs

17:50 SOC 2 Help from Fuji

21:23 SOC 2 Costs and Maintenance

22:49 Easy Buttons and Real Audits

26:27 Cyber Insurance Questionnaires

27:53 Partnering for Expertise

29:07 Cyber Insurance Foot in Door

30:31 Apple Store Referral Win

31:01 Lightroom Migration Pitfalls

34:31 Blocked Contacts Mystery

38:04 Email Search and User Training

40:02 Supporting Vision Pro Clients

47:28 Amazon Returns and Exceptions

50:24 Wrap Up and Callouts