Monday, 19 October 2026

macOS SMB mounting guidance now specifies a lowercase `cifs` identifier URI

Three Microsoft Learn pages were updated on 19 October. The most actionable change is in the macOS Platform SSO Kerberos configuration: the storage-account app registration must use a lowercase `cifs` identifier URI because uppercase `CIFS` prevents macOS from mounting the share. Global Secure Access release notes now cover Web sign-in, Conditional Access sign-in frequency for Private Access applications, firewall behavior, forwarding-profile names, and private-network bypass changes. The SAP IAG page removes “(Preview)” from its title and heading.

• Entra ID · Authentication

  macOS Kerberos setup specifies lowercase `cifs` for SMB mounting

  The updated configuration guidance expands access beyond limited availability, refreshes setup links, and specifies that the storage account app registration’s identifier URI must use lowercase `cifs`; an uppercase `CIFS` value prevents macOS from mounting the SMB share.

• Global Secure Access · General

  Global Secure Access release notes document new client behaviors and rollout details

  The release notes now document Web sign-in support, Conditional Access sign-in frequency for Private Access applications, updated firewall behavior, clearer forwarding-profile names, and private-network bypass changes. Conditional Access sign-in frequency support is rolling out gradually.

• ID Governance · Governance

  SAP IAG integration page removes the “Preview” label

  The Microsoft Entra SAP IAG integration page’s title and heading no longer include “(Preview),” with no administrator action identified.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.