Friday, 19 June 2026

Learn about the new Microsoft Entra bulk operations experience for managing users, groups, and devices.

- **[Entra ID](#entra-id)** — Manage users, groups, devices, applications, roles, and authentication methods.

Learn the core concepts of identity and access management (IAM), including authentication, authorization, and identity providers, to secure resources effectively.

Instructions about how to add your custom domain name to your tenant.

How to view restorable users, restore a deleted user, or permanently delete a user with Microsoft Entra ID.

Introduction to the Microsoft Entra product family including links to get started.

Compare the default user permissions available in Microsoft Entra ID and learn how to restrict access.

This article documents licensing requirements for Microsoft Entra features.

Learn about Microsoft Entra group-based licensing, including how it works,

Managing user license assignments individually is time consuming and error prone. If you [assign licenses to groups](~/fundamentals/licensing.md?context=azure/active-directory/users-groups-roles/context/ugr-context) instead, you experience easier large-scale license management.

Add group members in bulk by using a comma-separated values (CSV) file.

Remove group members in bulk operations by using a comma-separated values (CSV) file.

manager: pmwongera

manager: pmwongera

Download group members in bulk in the Microsoft Entra admin center.

>Editing a group (adding or removing users), it can take up to 24 hours for changes to take effect.

The following table lists features that are available for authentication in the various versions of Microsoft Entra ID. Plan out your needs for securing user sign-in, then determine which approach meets those requirements. For example, although Microsoft Entra ID Free provides security defaults with multifactor authentication, only Microsoft Authenticator can be used for the authentication prompt, including text and voice calls. This approach might be a limitation if you can't make sure that Authenticator is installed on a user's personal device.

This feature currently supports the following Windows Server distributions:

Starting February 2026, Microsoft Authenticator will block Entra credentials on jailbroken/rooted iOS and Android devices to enhance security. The rollout includes a warning phase followed by blocking. This feature is automatic, affects all users on such devices, and requires no admin action. Notify users and update documentation accordingly.

> Error code 1002013 indicates an expected (and successful) interrupt of the sign-up flow. [Learn more](howto-troubleshoot-sign-up-errors.md#sign-up-error-codes)

Here are some of the limits and constraints for branding themes.

Microsoft Entra Suite includes all Microsoft Entra Conditional Access features. Microsoft 365 E7 also includes Conditional Access features through the Entra Suite.

>The licensing options on this page aren't comprehensive. You can get detailed information about the various options at the [Microsoft Entra pricing page](https://www.microsoft.com/security/business/microsoft-entra-pricing) and at the [Compare Microsoft 365 Enterprise plans and pricing page](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing).

Microsoft Entra Agent ID licensing details

Starting soon, ID Protection for agents will require a [Microsoft Agent 365 license](https://www.microsoft.com/microsoft-agent-365#plans-and-pricing) to extend protection to agents through [Microsoft Entra Agent ID](../agent-id/what-is-microsoft-entra-agent-id.md#how-to-get-started).

1. Assign all discovered users to a specific access package:

Learn how to attach custom x-* headers to native authentication network requests in an Android (Kotlin) app to integrate fraud-detection SDKs with Microsoft Entra External ID.

1. On the **New SAML/WS-Fed IdP** page, enter the following: