Daily.Entra.News5 changes were tracked across 3 Microsoft Entra products. The leading updates include Conditional Access Agent Optimization Knowledge Base; Conditional Access policies now apply to Windows Hello for Business and macOS Platform SSO registration; Managed Policies.
Conditional Access policies will apply to Windows Hello for Business and macOS Platform SSO registration starting July 6, 2026, enforcing policy requirements like MFA and trusted locations during enrollment. Organizations should review and test policies, update documentation, and ensure users can meet requirements before rollout completes July 13, 2026.
- Contractors are governed by their own policies separate from the baseline
Device code flow is rarely used by customers, but is frequently used by attackers. Enabling this Microsoft-managed policy for your organization helps remove this attack vector.
| Feature | Workforce tenant | External tenant |
1. Under **Assignments**, select **Users or workload identities**.
