Microsoft Teams: Migrate shared Teams devices to passwordless Entra resource accounts

Microsoft Teams is introducing a new migration experience in the Teams Rooms Pro Management portal to move shared device accounts to passwordless Microsoft Entra resource accounts. This improves security by using device-bound credentials. Admins must initiate migration, starting early August 2026, with recommended phased deployment and validation.

[What and Why:]

We're introducing phase 1 of the passwordless Entra Resource Accounts modernization initiative for Microsoft Teams shared devices. This update adds a new account migration experience in the Teams Rooms Pro Management portal that enables admins to identify, schedule, and execute bulk migrations of existing room resource accounts to passwordless Microsoft Entra resource accounts.

Passwordless Entra resource accounts improve security by reducing reliance on stored usernames and passwords while helping increase sign in resilience through secure device-bound credentials. The migration process is initiated by an administrator and will not occur automatically without administrative approval.

This message is associated with Microsoft 365 Roadmap ID 558853.

[Rollout Schedule]

• General Availability (Worldwide): Beginning early August 2026 and complete by late August 2026

[Impact on Your Organization]

Who is affected

• Admins who manage Teams shared devices through the Teams Rooms Pro Management porta
• Organizations with Teams shared devices that are currently managed in the Teams Rooms Pro Management portal and joined to Azure Active Directory (Microsoft Entra ID)

Platforms/Services

• Microsoft Teams
• Teams Rooms Pro Management portal
• Microsoft Entra ID
• Teams shared devices and shared space devices

What will happen

• A new migration experience will be available under the Resource Accounts tab in the Teams Rooms Pro Management portal.
• Admins will be able to identify eligible resource accounts for migration.
• Admins will be able to schedule and perform bulk migrations to passwordless Entra resource accounts.
• Devices will authenticate using secure device-bound credentials instead of stored username and password credentials after migration.
• Existing Teams resource account creation and deployment processes remain unchanged.
• Migration is not automatic and requires explicit administrator action.

[Action Required/Recommendations]

Action is recommended.

• Start with a small pilot group of rooms or shared devices.
• Validate the sign in and device experience after migration.
• Expand deployment to additional rooms in phases after successful validation.
• Review and update any internal deployment or operational documentation related to Teams shared device authentication.

Microsoft plans to expand support for additional scenarios in future phases of this initiative.

Recommended:

• Review the Microsoft Learn documentation for transitioning Teams shared devices to passwordless Entra resource accounts.
• Review the Microsoft Learn documentation for configuring Teams shared device accounts as resource accounts if your organization is not yet ready to adopt passwordless authentication.
• If your organization is not ready to transition immediately, you can still strengthen your security posture by marking Teams shared device accounts as resource accounts.

Learn more

• Set as a Resource Accounts for Shared Devices in Teams Rooms Pro Management | Microsoft Teams | Microsoft Learn
• Transition to Password-less Teams Shared Space device Resource Accounts | Microsoft Teams | Microsoft Learn

[Compliance considerations]

No compliance considerations identified, review as appropriate for your organization.