Tuesday, 29 April 2025

The **Authentication Details** tab provides the following information, for each authentication attempt:

|2519|Reinitialize Entra ID Connector account password| Shows that the AD Sync service account password was reset|

A Microsoft Entra documentation page was updated: Configure Security.

**Type:** New feature

author: rolyon

author: rolyon

Entra Connect uses the [Microsoft Entra Connector account](reference-connect-accounts-permissions#accounts-used-for-microsoft-entra-connect.md) to authenticate and sync identities from Active Directorty to Entra ID. This account uses username and password to authenticate requests. To enhance the security of the service, we are rolling out an application identity that uses Oauth 2.0 client credential flow with certificate credentials. In this new method, Entra or Administrator will create a single tenant 3rd party application in Entra ID and use one of the relevant certificate management options below for the credentials.

Learn about OAuth 2.0 and OpenID Connect in Microsoft identity platform. Explore authentication flows, endpoints, and secure user authentication.

A Microsoft Entra documentation page was updated: Scenario Spa App Registration.

**Remediation action**

An how-to guide on dynamically determining the approval requirements for an access package externally using a custom extension.

- Allow the use of unenlightened apps, but block them from accessing Microsoft resources using a special WDAC policy, called an “AppIdTagging policy”.

1. User requests a DNS query for `app.contoso.com`. If not cached locally, the DNS query is sent to the DNS proxy at the GSA edge.