Daily.Entra.News
Aboutmerill.net
← Previous day

Next day →
Plain-English daily brief

What changed on this day

290 changes were tracked across 8 Microsoft Entra products. The leading updates include Authenticate Application Id; Recommendations; Microsoft Entra ID attestation for FIDO2 security key vendors.

290 updates

Microsoft identity platform

44

Quickstart Create New Tenant

Updated

In this quickstart, you learn how to create a Microsoft Entra tenant for use in developing applications that use the Microsoft identity platform for authentication and authorization.

Support Fido2 Authentication

Updated

FIDO2 is supported for Android apps that use MSAL with [BROWSER as the authorization user agent](/entra/msal/android/msal-configuration#authorization_user_agent) or broker integration. Broker is shipped in Microsoft Authenticator, Company Portal, or Link to Windows app on Android.

Tutorial Native Authentication Android Sign In Call Api

Updated

In this tutorial, you learn how to acquire an access token and call an API in your Android mobile app. Microsoft Authentication Library (MSAL) native authentication SDK for Android allows you to acquire multiple access tokens with a single sign-in. This capability allows you to acquire one or more access tokens without requiring a user to reauthenticate.

Tutorial Native Authentication Single Page App React Set Up Local Cors

Updated

In this tutorial, you learn how to set up the CORS proxy server to manage CORS headers while interacting with native authentication API from a React single-page app (SPA). The CORS proxy server is a solution to the native authentication API's inability to support [Cross-Origin Resource Sharing (CORS)](https://developer.mozilla.org/docs/Web/HTTP/CORS).

Tutorial Single Page App React Prepare App

Updated

In this tutorial you'll build a React single-page application (SPA) and prepare it for authentication using the Microsoft identity platform. This tutorial demonstrates how to create a React SPA using `npm`, create files needed for authentication and authorization and add your tenant details to the source code. The application can be used for employees in a workforce tenant or for customers using an external tenant.

Tutorial Single Page Apps Angular Extract User Data

Updated

This tutorial is the final part of a series that demonstrates building an Angular single-page application (SPA) and adding authentication using the Microsoft identity platform. In [Part 2 of this series](tutorial-single-page-apps-angular-sign-in-users-app.md), you created an Angular SPA and prepared it for authentication with your workforce tenant.

Tutorial V2 Shared Device Mode

Updated

In this tutorial, Android developers learn how to add shared device mode support in an Android application using the Microsoft Authentication Library (MSAL) for Android.

Tutorial Web App Dotnet Call Api

Updated

In this tutorial, you test the sign in and sign out experience of your ASP.NET Core web app and view the claims in the ID token. In the [previous tutorial](./tutorial-web-app-dotnet-sign-in-users.md), you added the authentication elements, the sign-in, and sign-out experiences to the application to enable your app call a web API. For the purposes of this tutorial, the Microsoft Graph API is called to display the profile information of the logged-in user.

Tutorial: Create a .NET MAUI app

Updated

This tutorial demonstrates how to create a .NET MAUI shell app, add MSAL SDK support via MSALClient helper, and include an image resource.

Multi Service Web App Clean Up Resources

Updated

If you completed all the steps in this multipart tutorial, you created an app service, app service hosting plan, and a storage account in a resource group. You also created an app registration in Microsoft Entra ID. When no longer needed, delete these resources and app registration so that you don't continue to accrue charges.

Tutorial Web Api Dotnet Core Build App

Updated

This tutorial series demonstrates how to protect an ASP.NET Core web API with the Microsoft identity platform to limit it's access to only authorized users and client apps. The web API you build uses both delegated permissions (scopes) and application permissions (app roles).

Authentication

43

Authenticate Application Id

Updated

> - It is recommended to use the TPM to provide a hardware-based security boundary, as opposed to the Local Machine store. To check the status of your TPM use the [Get-TPM](/powershell/module/trustedplatformmodule/get-tpm?view=windowsserver2025-ps) PowerShell cmdlet. If using Hyper-V VMs, the TPM can be enabled by checking Security > Enable Trusted Platform Module. This can only be done on a generation 2 virtual machines. Generation 1 virtual machines can't be converted to a generation 2 virtual machines. For more information see [Generation 2 virtual machine security settings for Hyper-V](/windows-server/virtualization/hyper-v/learn-more/generation-2-virtual-machine-security-settings-for-hyper-v) and [Enable Trusted launch on existing Azure Gen2 VMs](/azure/virtual-machines/trusted-launch-existing-vm)

Tutorial Native Authentication Android Sign Up

Updated

This tutorial demonstrates how to sign up a user using email one-time passcode or username (email) and password, and collect user attributes in your Android mobile app using native authentication.

Tutorial Web App Dotnet Sign In Users

Updated

In this tutorial, you add the authentication and authorization elements to an ASP.NET Core web app. In the [previous tutorial](./tutorial-web-app-dotnet-prepare-app.md), you created an ASP.NET Core project and configured it for authentication.

Tutorial Mobile Android Device Shared Mode

Updated

In this tutorial, you learn how to add shared device mode support to an Android device with the Microsoft Authenticator App or a Mobile Device Management (MDM) tool like Microsoft Intune. Employees sign in once for single sign-on (SSO) to all SDM-supported apps and sign out to make the device ready for the next user with no access to previous data.

Developer

43

Custom Extension Onattributecollectionsubmit Retrieve Return Data

Updated

The request to your REST API is in the format shown in the following example. In this example, the request includes user identities information along with built-in attributes (givenName and companyName) and custom attributes (universityGroups, graduationYear, and onMailingList).

General

38

Multi Service Web App Access Microsoft Graph As User

Updated

You want to add access to Microsoft Graph from your web app and perform some action as the signed-in user. This section describes how to grant delegated permissions to the web app and get the signed-in user's profile information from Microsoft Entra ID.

Provisioning

18

Fundamentals

10

Recommendations

Updated

| AAD Connect Deprecated | Tenant | Preview | No | Hybrid Identity Administrator |

Multi Service Web App Authentication App Service

Updated

The authentication module is enabled and configured through the Azure portal and app settings. No SDKs, specific languages, or changes to application code are required.​ A variety of identity providers are supported, which includes Microsoft Entra ID, Microsoft Account, Facebook, Google, and X​​. When the authentication module is enabled, every incoming HTTP request passes through it before being handled by app code.​​ To learn more, see [Authentication and authorization in Azure App Service](/azure/app-service/overview-authentication-authorization).

Provisioning Logs

Updated

- Examples of Other include if the source and target system details already match, so no change was made.

Standards

8

Tutorial Cli App Node Sign In Prepare App

Updated

This tutorial is part 1 of a series that demonstrates building a Node.js command line interface (CLI) app and preparing it for authentication using the Microsoft Entra admin center. The client application you build uses the [OAuth 2.0 Authorization Code Flow](~/identity-platform/v2-oauth2-auth-code-flow.md) with Proof Key for Code Exchange (PKCE) for secure user authentication.

Security

7

Tutorial V2 Windows Desktop

Updated

When you've completed the guide, your application will able to call a protected API that uses personal accounts (including outlook.com, live.com, and others). The application will also use work and school accounts from any company or organization that uses Microsoft Entra ID.

Tutorial Web Api Dotnet Core Call Protected Api

Updated

This tutorial is the final part of a series that demonstrates building and testing a protected web API registered in a Microsoft Entra tenant. In [Part 1 of this series](tutorial-web-api-dotnet-core-build-app.md), you created an ASP.NET Core web API and protected its endpoints. You'll now create a lightweight daemon app, register it in your tenant, and use the daemon app to test the web API you built.

Troubleshooting

5

Monitoring

3

Fundamentals

1

Security

1

Workbook Risk Based Policy Impact

Updated

:::image type="content" source="media/workbook-risk-based-policy-impact/workbook-risk-based-impact-trusted-network.png" alt-text="Screenshot showing the trusted network section of the workbook." lightbox="media/workbook-risk-based-policy-impact/workbook-risk-based-impact-trusted-network.png":::

Fundamentals

1

Self Service Portal

Updated

As an inviting organization, you might not know ahead of time who the individual external collaborators are who need access to your resources. You need a way for users from partner companies to sign themselves up with policies that you control. You can use [Microsoft Entra entitlement management](~/id-governance/entitlement-management-overview.md) to configure policies, which [manage access for external users](~/id-governance/entitlement-management-external-users.md#how-access-works-for-external-users). Then users from other organizations can request access, and upon approval be provisioned with guest accounts and assigned to groups, apps, and SharePoint Online sites.

Governance

1

Entitlement Management Dynamic Approval

Updated

Once you've created the custom extension and Logic app, you can reference the custom extension in an access package assignment policy by doing the following steps:

Authentication

2

Self Service Sign Up Secure Api Connector

Updated

Client certificate authentication is a mutual certificate-based authentication. The client, Microsoft Entra ID, provides its client certificate to the server to prove its identity as part of the SSL handshake. Your API is responsible for validating the certificates belong to a valid client, such as Microsoft Entra ID, and performing authorization decisions. The client certificate is an X.509 digital certificate.

Tutorial: Authenticate users to your WPF desktop application

Updated

This tutorial is the final part of a series that demonstrates building a Windows Presentation Form (WPF) desktop app and preparing it for authentication using the Microsoft Entra admin center. In [Part 1 of this series](./tutorial-desktop-wpf-dotnet-sign-in-prepare-tenant.md), you registered an application and configured user flows in your external tenant. This tutorial demonstrates how to build your .NET WPF desktop app and sign in and sign out a user using Microsoft Entra External ID.

Developer

2

General

2

Provisioning

2

Microsoft identity platform

1

Security

1

Fundamentals

1

General

1

General

2

Conditional Access

1

Developer

1

Fundamentals

1

Authentication

2

Fundamentals

1

Multi Service Web App Access Microsoft Graph As App

Updated

You want to call Microsoft Graph for the web app. A safe way to give your web app access to data is to use a [system-assigned managed identity](~/identity/managed-identities-azure-resources/overview.md). A managed identity from Microsoft Entra ID allows App Service to access resources through role-based access control (RBAC), without requiring app credentials. After assigning a managed identity to your web app, Azure takes care of the creation and distribution of a certificate. You don't have to worry about managing secrets or app credentials.

Security

1

Multi Service Web App Access Storage

Updated

A managed identity from Microsoft Entra ID allows App Service to access resources through role-based access control (RBAC), without requiring app credentials. After assigning a managed identity to your web app, Azure takes care of the creation and distribution of a certificate. People don't have to worry about managing secrets or app credentials.

General

25

Fundamentals

11

Monitoring

4

Conditional Access

2

Developer

2

Troubleshooting

2