💡 Our Technical Review in summary
Microsoft is transitioning all Android-based Teams devices from legacy authentication to modern, secure authentication based on Microsoft Entra ID (formerly Azure AD) tokens. This change is designed to bolster security by enabling advanced features such as Continuous Access Evaluation (CAE) and IP-based conditional access enforcement. The transition affects Teams Phones, Teams Panels, Microsoft Teams Rooms on Android (MTRA), and Teams Displays. Organizations must update these devices to specific minimum app versions to maintain connectivity before legacy authentication is retired.
#### Impact
- Security Enhancements: IT Administrators will gain the ability to enforce stricter security policies, including IP-based conditional access and real-time session revocation via CAE.
- End-User Experience: There will be no visible change to the interface or workflow for end users, provided the devices are updated to the required versions.
- Service Disruption: Any device not running the minimum required app version by the final deadline will fail to authenticate, resulting in a total loss of Teams services on those devices.
- Timeline Milestones:
- July 31, 2025: Automated switch to modern authentication begins for supported app versions (excluding Teams Displays).
- September 30, 2025: Deadline for MTR-A devices to be leveraging modern authentication.
- December 31, 2025: Final Cutover. All legacy authentication traffic will be blocked.
#### Action Required
- Inventory Audit: Identify all Android-based Teams devices within the tenant, including Phones, Panels, Displays, and MTR-A units.
- Update Firmware/Apps: Use the Microsoft Teams Admin Center (TAC) to push updates to the following minimum versions (or higher):
- Teams Phones: 1449/1.0.94.2025020301
- Teams Rooms on Android (MTRA): 1449/1.0.96.2025020302
- Teams Panels: 1449/1.0.97.2025020502
- Monitor Teams Displays: Watch for the upcoming release of the required version for Teams Displays, as it is currently pending.
- Compliance Deadline: Ensure all devices are updated and verified as running modern authentication prior to the December 31, 2025 hard deadline to avoid service outages.
- Verification: Post-update, verify in the Entra ID sign-in logs that these devices are successfully utilizing token-based modern authentication.
Microsoft Official Update
Service: N/A
Category: planForChange
Severity: normal
If your organization does not manage one or more certified Microsoft Teams Android devices, you can safely ignore this message.
Your organization manages one or more certified Microsoft Teams Android devices, such as Teams Phone devices, Teams Panels, Teams Displays, and Teams Rooms on Android (MTRA). To enhance security capabilities such as Continuous Access Evaluation and IP-based conditional access enforcement, Microsoft is transitioning these devices to modern, secure authentication using Entra ID (AAD) based tokens.
These changes will impact how devices authenticate to Teams services. This update provides key dates, required versions, and important cautions—especially for tenants using Teams Displays.
[How this will affect your organization:]
Once your devices are updated to the app versions listed below, end users will see no change in their Teams experience, while admins will have enhanced security capabilities such as Continuous Access Evaluation and IP-based conditional access enforcement. These updates are required to maintain connectivity and support secure authentication.
Minimum required app versions for modern authentication:
- Teams Phones: 1449/1.0.94.2025020301
- Teams Rooms on Android (MTRA): 1449/1.0.96.2025020302
- Teams Panels: 1449/1.0.97.2025020502
- Teams Displays: To be released
[When this will happen:]
- July 31, 2025: Devices on supported app versions will automatically switch to modern authentication. Devices on unsupported app versions will continue to work with legacy authentication. NOTE: Teams Displays will be excluded from this milestone.
- September 30, 2025: All MTR-A devices on minimum app versions will be leveraging modern authentication. Admins should ensure updating their apps to suggested versions by this date.
- December 31, 2025: All authenticated traffic must use modern authentication. Ensure all Teams Android devices are updated to the versions listed above as soon as they are available and before December 31, 2025, to avoid service disruption.
[What you need to do to prepare:]
Ensure all Teams Android devices are updated to the versions in this message as soon as they are available and before December 31, 2025, to avoid service disruption.
