Wednesday, 12 August 2026

Global Secure Access V2 web filtering guidance defines policies, rules, and V1 coexistence

The main substantive addition is a Microsoft Entra Internet Access concept article describing the V2 web-filtering model: one policy per security profile, rule-level actions, a default action, URL-based FQDN destinations, and coexistence with V1 until migration. Other updates clarify granular AMR configuration, Staged Rollout sign-in troubleshooting, and MCP setup links. An ID Protection edit only retitles a workaround and changes no procedure.

• Internet Access · Fundamentals

  V2 web-filtering model is newly documented for Microsoft Entra Internet Access

  A new concept article explains V2 policies, destination matching, and coexistence with V1 web content filtering. It specifies one policy per security profile, multiple rules with individual actions, a default action, and FQDN destinations configured as URLs. The supplied evidence describes a documentation addition, not a release or availability milestone.

• Entra ID · Microsoft identity platform

  Optional Claims guidance clarifies granular AMR configuration paths

  The updated article explains that SAML applications must configure include_granular_amr through the application manifest or Microsoft Graph because the admin center has no corresponding UI option. It also documents adding the amr claim to OIDC token types and clarifies that include_granular_amr applies only to SAML, while preserving existing optional-claim settings remains important.

• Entra ID · Authentication

  Staged Rollout guidance now details additional interactive sign-ins

  General transition text was replaced with scenarios covering extra federated or Microsoft Entra sign-ins when users are added to or removed from Staged Rollout. The update also covers Microsoft Entra ID Protection remediation events, including SSPR and risk remediation, giving administrators more specific troubleshooting context rather than announcing a new rollout feature.

• Entra ID · Provisioning

  Provisioning-log MCP references move from Learn to the EnterpriseMCP repository

  The Microsoft MCP Server for Enterprise overview and setup links now point to the EnterpriseMCP GitHub repository. The article still describes the service as preview, global-service-only, and read-only, so this is a reference-location update rather than a change to service availability or capability.

• ID Protection · Authentication

  ID Protection workaround heading now states its purpose more precisely

  The heading changed from “Workaround for newly added Staged Rollout users” to “Workaround to avoid one additional federated sign-in.” The supplied diff contains no procedural change, so administrators should not infer a new remediation step.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.