Wednesday, 7 May 2025

Organizations deploying phishing-resistant passwordless typically have a need for some of their personas to use remote desktop technology to facilitate productivity, security, or administration. The two basic use cases are:

[Deploy a phishing-resistant passwordless authentication deployment in Microsoft Entra ID](how-to-deploy-phishing-resistant-passwordless-authentication.md)

[Considerations for specific personas in a phishing-resistant passwordless authentication deployment in Microsoft Entra ID](how-to-plan-persona-phishing-resistant-passwordless-authentication.md)

[Deploy a phishing-resistant passwordless authentication deployment in Microsoft Entra ID](how-to-deploy-phishing-resistant-passwordless-authentication.md)

$certHash = ($hashBytes|ForEach-Object ToString X2) -join ''

The provisioning summary report and Provisioning logs play a key role helping admins troubleshoot various user account provisioning issues.

Refer to the following links to troubleshoot any issues that may turn up during provisioning:

To troubleshoot any issues that might turn up during provisioning, see the following articles:

* [Troubleshooting provisioning](troubleshoot.md)

This article shows the new and updated documentation for the Microsoft Entra application management.

1. Perform the following step, if you wish to configure the application in **SP** initiated mode:

- [Check the status of user provisioning](../app-provisioning/application-provisioning-when-will-provisioning-finish-specific-user.md)

- [Skip deletion of user accounts that go out of scope in Azure Active Directory](skip-out-of-scope-deletions.md)

[Build a SCIM endpoint and configure provisioning when creating your own app](~/identity/app-provisioning/use-scim-to-provision-users-and-groups.md)

Redirect URIs for SPAs that use the auth code flow require special configuration.

Administrators with at least the [Conditional Access Administrator](../role-based-access-control/permissions-reference.md#conditional-access-administrator) role assigned find these policies in the [Microsoft Entra admin center](https://entra.microsoft.com) under **Protection** > **Conditional Access** > **Policies**.

author: MicrosoftGuyJFlo

If an adversary is able to successfully steal a token, organizations can enable certain capabilities to automatically reduce the

author: shlipsey3

In this article, you find questions to commonly asked questions about [access reviews](access-reviews-overview.md). Check back to this page frequently as changes happen often, and answers are continually being added.

Registration of passkey (FIDO2) credentials isn't supported for internal or external guest users, including B2B collaboration users in the resource tenant.

1. Select **Add**.

| View traffic logs and alerts | ✅ | ✅ | ✅ | | | | | ✅ |

- A **Security Administrator** role is required to export Global Secure Access Network Traffic Logs in Diagnostic Settings.