Assignment Network
Doc updateA link was fixed on the Conditional Access network assignment page.
Day in brief
LES Writeback, Android Play Integrity, and SCIM mailNickname rules sharpen Entra guidance
The period was dominated by ordinary documentation maintenance—sample GUIDs, example identifiers, a corrected link, and PowerShell example syntax. The substantive updates were clearer Conditional Access guidance for Android integrity checks, new Exchange Hybrid detail on LES Writeback, and a precise SCIM description of how Entra ID handles mailNickname during user creation.
- Conditional Access guidance documents Android Play Integrity enforcement
Entra ID · AuthenticationThe Assignment Network guidance now says Microsoft Authenticator for Android uses the Google Play Integrity API for jailbreak detection and denies access when the API is unavailable, unless the policy is disabled. Use this detail when troubleshooting blocked Android access under Conditional Access.
The article now documents Entra2ADExchangeOnlineAttributeWriteback, also called LES Writeback, including its cloud-managed attribute flow, distinction from Exchange hybrid writeback, supported attributes, mappings, and related guidance.
- SCIM reference clarifies mailNickname creation and PATCH limits
Entra ID · StandardsWhen creating a user, mailNickname may be omitted, null, or empty. Entra ID derives it from the characters before the first @ in userName, and after creation it cannot be removed with PATCH.
- Consent policy examples replace documented application IDs
Entra ID · DeveloperThe Manage App Consent Policies guidance replaces the application IDs shown for Apple Mail, Spark Email, eM Client, Android-Samsung, Android-Mail, and Thunderbird. Administrators using those identifiers in consent-policy rules should verify them against the updated examples.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
14 updates
Microsoft Entra ID
12 updatesAssignment Network
Doc updateThe Conditional Access documentation now describes Microsoft Authenticator for Android using Google Play Integrity API for jailbreak detection and denying access when the API is unavailable, unless the policy is disabled.
The documented query now filters for UserId `00aa00aa-bb11-cc22-dd33-44ee44ee44ee` instead of the previous identifier.
What If Tool
Doc updateThe Conditional Access What If tool documentation replaces the sample UserId in four example rows with a new sample identifier.
Manage App Consent Policies
Doc updateThe documented application IDs for Apple Mail, Spark Email, eM Client, Android-Samsung, Android-Mail, and Thunderbird were replaced.
Grant Admin Consent
Doc updateThe grant-admin-consent documentation updates the resource API object IDs shown in delegated- and application-permission examples.
Manage App Consent Policies
Doc updateThe examples now define cmdlet parameters in `$params` hashtables before creating custom consent policies and configuring inclusions or exclusions.
Exchange Hybrid
Doc updateThe article now describes Entra2ADExchangeOnlineAttributeWriteback (LES Writeback), including its cloud-managed attribute flow, distinction from Exchange hybrid writeback, supported attributes, mappings, and related guidance.
Assign App Owners
Doc updateThe PowerShell example now uses a different sample ServicePrincipalId value in the New-MgServicePrincipalOwnerByRef command.
The documented ServicePrincipalId example was replaced with a generic UUID.
Entra Id Scim Api Reference
Feature updateThe SCIM API reference now states that mailNickname may be omitted, null, or empty when creating a user. Microsoft Entra ID derives it from the characters before the first @ in userName. After creation, it cannot be removed with PATCH.
The example Tenant ID was changed from 12345678-90ab-cdef-1234-567890abcdef to aaaabbbb-0000-cccc-1111-dddd2222eeee.
Microsoft Entra Agent ID
1 updateAgent Token Claims
Doc updateThe documentation now shows different sample GUID values for the aud, appid, oid, sub, and tid claims.
Microsoft Entra External ID
1 updateCreate Service Principal Cross Tenant
Doc updateThe cross-tenant service principal article changes the example ServicePrincipalId from `bbbbbbbb-1111-2222-3333-cccccccccccc` to `aaaaaaaa-bbbb-cccc-1111-222222222222`.