Daily.Entra.News
227
2312
24422592627281229263010
115Starting mid-October 2026, SharePoint One-Time Passcode authentication will retire and SharePoint and OneDrive external sharing will move to Microsoft Entra B2B guest accounts across Microsoft 365 tenants. A second major update opens self-service onboarding for new Microsoft Entra App Gallery applications in public preview, with general availability beginning in mid-November. Documentation changes also carry concrete provisioning consequences for Connect Sync and SAP SuccessFactors workload identities; most remaining updates cover guest-lifecycle guidance, CSV procedures, naming, and endpoint examples.
External ID · Conditional AccessSharePoint One-Time Passcode authentication will retire starting in mid-October. SharePoint and OneDrive external sharing will use Microsoft Entra B2B instead, requiring external users to have guest accounts and enabling consistent governance and Conditional Access.
Entra ID · StandardsNew-application submitters can validate SSO and provisioning integrations, manage submissions, and track status in the Microsoft Entra admin center. Public preview is available now; general availability begins in mid-November 2026. The message says no action is required.
Entra ID · ProvisioningThe hardening guidance extends the deadline from September 30, 2026, to April 7, 2027, while retaining Microsoft Entra Connect Sync 2.5.79.0 or later as the minimum. It warns that synchronization services will fail until the upgrade is complete.
Workload ID · ProvisioningThe guide changes the required Microsoft Entra Connect version from 2.5.79.0 to 2.6.84.0 or later and adds application-based authentication as a requirement for maintaining directory synchronization and avoiding service disruption.
Workload ID · AuthenticationThe updated guide removes the Preview label and limits reuse: the workload identity’s Application API host must match the provisioning app’s SAP SuccessFactors API host. It also adds the Application ID URI format and compatibility details for the September 15, 2026 update.
External users will need guest accounts for affected SharePoint and OneDrive sharing scenarios, so administrators should review guest governance and Conditional Access coverage. Apply the Connect requirement that matches each deployment: the general hardening guidance sets a 2.5.79.0-or-later deadline of April 7, 2027, while the AD FS/PingFederate guide requires version 2.6.84.0 or later plus application-based authentication. For SAP SuccessFactors provisioning, ensure the workload identity and provisioning app use the same API host. No action is required for the App Gallery onboarding preview.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now requires preserving downloaded column headings, allows the examples row to remain, and identifies only Name, User name, and Initial password as required fields. The sample CSV was simplified.
The instructions now require the exact downloaded column header and allow each user row to contain either a user principal name or object ID. The examples row may remain, and User Administrator is listed as the minimum role.
The article now requires the downloaded `Object ID [objectId] Required` header to remain unchanged and says the examples row can be retained. It also documents the User Administrator prerequisite.
The article now uses a Cisco FQDN placeholder for the SAML metadata URL and emphasizes that Identifier and Reply URL examples must be verified against the intended Cisco endpoints and trusted domains.
The page’s publication date and custom metadata tags were updated.
The minimum-version deadline for Microsoft Entra Connect Sync is extended from September 30, 2026, to April 7, 2027. Version 2.5.79.0 or later is required.
The guide now consistently refers to the application, tenant, SCIM API, and gallery entry as Zscaler ZNet.
The tutorial replaces references to Zidentity and Zscaler Provisioning with Zscaler Authentication Service and updates related titles, prerequisites, app-role guidance, and provisioning steps. The page date was also updated.
Microsoft Entra App Gallery introduces self-service onboarding for new applications, allowing ISVs to validate SSO and provisioning integrations, manage submissions, and track status via the Microsoft Entra admin center. Public preview is available now; general availability begins mid-November 2026. No action required.
The documentation now describes blocked highly privileged directory roles for agent identities without the obsolete custom-role restriction wording.
The new page documents the preview experience for reviewing guests, extending or ending sponsorship, and sponsoring eligible unsponsored guests. It also explains policy-driven lifecycle behavior.
The documentation describes configuring guest scopes, lifecycle rules, notifications, precedence, and automated disable or deletion actions for external users.
SharePoint One-Time Passcode (SPO OTP) authentication will retire starting mid-October 2026, transitioning external sharing and authentication to Microsoft Entra B2B. This change affects all Microsoft 365 tenants, requiring guest accounts for external users and enabling consistent governance and Conditional Access across SharePoint and OneDrive.
The guide removes the Preview label and documents that workload identities are reusable only when their Application API host matches the provisioning app’s SAP SuccessFactors API host. It also adds the Application ID URI format and compatibility details for the September 15, 2026 update.
The required Microsoft Entra Connect version changed from 2.5.79.0 to 2.6.84.0 or later. The documentation also now requires application-based authentication to maintain directory synchronization and avoid service disruptions.
