Entra.News Daily

Customize Application Attributes

Tue, 04 Aug 2026 00:00:00 GMT

The application attribute customization article now links to guidance on extending attribute mappings with LCW extensibility workflows.

Extend Application Attributes

Tue, 04 Aug 2026 00:00:00 GMT

The documentation now explains how to create custom task extensions and extensibility workflows through Microsoft Graph, including required permissions and example requests and responses. The workflow example is labeled Preview.

Product names and service plan identifiers for licensing

Tue, 04 Aug 2026 00:00:00 GMT

The reference now links to license management in the Azure portal, updates the table as of August 3, 2026, adds Agent 365, and revises service and plan identifier entries.

Sms Voice Retirement

Tue, 04 Aug 2026 00:00:00 GMT

The updated documentation says passkeys will be automatically enabled for users using SMS or voice on September 1, 2026. From February 1, 2027, tenants without a customer-managed telecom provider will no longer be able to use SMS or voice for MFA. The timeline applies to public cloud; Azure AD B2C and Entra External ID are excluded from this announcement.

How to manage the Internet Access profile

Mon, 03 Aug 2026 00:00:00 GMT

The article now describes traffic forwarding through the Global Secure Access client and remote networks, six policies instead of three, Microsoft Traffic Bypass, Custom Acquire, and Agentic Acquire. It also expands Custom Bypass configuration steps to cover destination types, ports, and protocols.

Automatic Governance Relationships

Sat, 01 Aug 2026 00:00:00 GMT

When you create a new Microsoft Entra tenant using the secure add-on tenant creation feature, you're prompted to select an existing subscription and resource group from your billing account. When you create your new tenant, Microsoft generates a new billing asset called **Entra ID Free** under that subscription and resource group, which links to the newly created tenant.

Configure configuration management service permissions

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to assign or remove the application permissions and roles that the Tenant Configuration Management service uses to create snapshots and run monitors

Create a configuration monitor

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to create a configuration monitor in Microsoft Entra Tenant Governance to evaluate a tenant against a configuration baseline and report drift

Create a governed workforce tenant

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to securely create a governed Microsoft Entra workforce tenant and establish governance from your home tenant.

Create configuration snapshots

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to create configuration snapshots in Microsoft Entra Tenant Governance to capture tenant configuration for baselines or audit evidence

Customize Application Attributes

Sat, 01 Aug 2026 00:00:00 GMT

> [!NOTE]

Deploy Microsoft Entra Tenant Governance end to end

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to deploy Microsoft Entra Tenant Governance from setup through tenant discovery, governance, and configuration monitoring

Global Secure Access and Microsoft Defender for Cloud Apps coexistence

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to configure Microsoft Entra Internet Access and Microsoft Defender for Cloud Apps side by side without proxying traffic twice.

Lifecycle Workflow Unsponsored Guest Removal

Sat, 01 Aug 2026 00:00:00 GMT

This article walks you through managing unsponsored guests using the **Unsponsored guest cleanup (Preview)** workflow template.

Microsoft Entra collaborating production tenants guidance

Sat, 01 Aug 2026 00:00:00 GMT

Learn about Microsoft Entra tenant architecture for collaborating production tenants so that you can identify your needs and compare architectural options.

Microsoft Entra hybrid identity and isolation multitenant guide

Sat, 01 Aug 2026 00:00:00 GMT

Learn about Microsoft Entra tenant architecture for hybrid identity and isolation so that you can identify your needs and compare architectural options.

Microsoft Entra nonproduction environments multitenant guidance

Sat, 01 Aug 2026 00:00:00 GMT

Learn about Microsoft Entra tenant architecture for nonproduction environments so that you can identify your needs and compare architectural options.

Microsoft Entra primary production tenant guidance

Sat, 01 Aug 2026 00:00:00 GMT

Learn about Microsoft Entra tenant architecture for primary production tenants so that you can identify your needs and compare architectural options.

Microsoft Entra tenant estate guidance introduction

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to compose your Microsoft Entra tenant estate from common tenant architecture patterns so that you can meet your requirements with as few tenants as possible.

Microsoft Entra tenants for business partner access guidance

Sat, 01 Aug 2026 00:00:00 GMT

Learn about Microsoft Entra tenant architecture for business partner access so that you can identify your needs and compare architectural options.

Microsoft Entra tenants for critical business systems guidance

Sat, 01 Aug 2026 00:00:00 GMT

Learn about Microsoft Entra tenant architecture for critical business systems so that you can identify your needs and compare architectural options.

Quickstart - Access and create new tenant

Sat, 01 Aug 2026 00:00:00 GMT

Instructions about how to find Microsoft Entra ID and how to create a new tenant for your organization.

Road to the cloud: Introduction

Sat, 01 Aug 2026 00:00:00 GMT

Organizations are increasingly modernizing identity, access, and device management by reducing their dependence on on-premises Active Directory and adopting cloud-native capabilities in Microsoft Entra ID. Whether the goal is complete Active Directory retirement or a smaller, more secure on-premises footprint, this guidance helps you plan and execute that transformation.

View monitor results and manage monitors

Sat, 01 Aug 2026 00:00:00 GMT

Learn how to view monitor results and configuration drifts and manage configuration monitors in Microsoft Entra Tenant Governance

Microsoft Entra ID: Retirement of custom CSS positioning properties in custom branding

Fri, 31 Jul 2026 00:00:00 GMT

Microsoft Entra ID will retire support for custom CSS positioning properties in company branding starting October 2026 to enhance security and phishing resistance. Existing users must remove these properties by then, as no migration path exists. Branding elements remain visible but may revert to default placement.

Sms Voice Retirement

Fri, 31 Jul 2026 00:00:00 GMT

This timeline applies to public cloud environments only. Other cloud environments will follow on a later schedule, and we will provide advance communications to help customers prepare for the transition.

Upcoming Conditional Access change: Improved enforcement for policies with resource exclusions

Fri, 31 Jul 2026 00:00:00 GMT

Starting June 15, 2026, Conditional Access policies targeting All resources with exclusions will be enforced for sign-ins requesting only certain OIDC or directory scopes. Some users may face new challenges like MFA. Most organizations need no action, but custom apps requesting only these scopes should be evaluated.

Workload Identities Federated Credential Mutable Subjects

Fri, 31 Jul 2026 00:00:00 GMT

"audiences": ["api://AzureADTokenExchange"]

Workload Identities Github Immutable Subjects

Fri, 31 Jul 2026 00:00:00 GMT

Replace `` with the object ID of your app registration. Create one credential for each subject the workflow presents, such as a different branch or environment.

Add OIDC for customer sign-in

Thu, 30 Jul 2026 00:00:00 GMT

Learn how to set up OpenID Connect as an external identity provider in Microsoft Entra External ID, enabling users to sign in using their existing accounts.

Cross-tenant delegated administration

Thu, 30 Jul 2026 00:00:00 GMT

Learn about cross-tenant delegated administration and the GDAP-based permission model for managing tenants in Microsoft Entra.

Customize Workflow Email

Thu, 30 Jul 2026 00:00:00 GMT

In the message body, you can customize the email text to personalize it for each recipient. You can optionally include built-in user attributes, custom security attributes, directory extensions, and on-premises extension attributes by embedding them in the text. Before the email is sent, the placeholders are replaced with the actual user information.

Global Secure Access and Universal Tenant Restrictions

Thu, 30 Jul 2026 00:00:00 GMT

Learn about how Global Secure Access helps secure access to your corporate network by restricting access to external tenants.

Governance Policy Templates

Thu, 30 Jul 2026 00:00:00 GMT

- Manage the governed tenant without needing a local or business-to-business (B2B) account in that tenant.

Gsa Poc Internet Access

Thu, 30 Jul 2026 00:00:00 GMT

1. Sign in to your test device and use a private browser window to sign in to any application that is protected by Entra ID in a different tenant, using member account credentials from that tenant.

Interpret tenant discovery data

Thu, 30 Jul 2026 00:00:00 GMT

Learn how to interpret tenant discovery data, signals, and metrics in Microsoft Entra Tenant Governance to assess related tenants

Investigate related tenant signals by using Microsoft Graph (preview)

Thu, 30 Jul 2026 00:00:00 GMT

Learn how to use Microsoft Graph to retrieve the underlying users and applications behind Tenant Governance related tenant discovery signals.

Lifecycle Workflow Tasks

Thu, 30 Jul 2026 00:00:00 GMT

With customized emails, you're able to include dynamic attributes within the subject and body to personalize these emails. You can include built-in user attributes, custom security attributes, directory extensions, and on-premises extension attributes. The list of dynamic attributes that can be included are as follows:

Migrate GitHub Actions federated credentials to immutable subjects

Thu, 30 Jul 2026 00:00:00 GMT

Learn how to migrate a Microsoft Entra federated identity credential for GitHub Actions from a mutable subject to GitHub's immutable subject format.

Mutable subjects in federated identity credentials

Thu, 30 Jul 2026 00:00:00 GMT

Learn how mutable OIDC subject claims expose Microsoft Entra federated identity credentials to subject recycling, and how immutable claims reduce the risk.

Passkeys by default and retirement of Microsoft-provided SMS and voice authentication

Thu, 30 Jul 2026 00:00:00 GMT

Learn how to prepare for the retirement of Microsoft provided SMS and Voice authentication in Microsoft Entra ID and migrate users to passkeys.

Prerequisites

Thu, 30 Jul 2026 00:00:00 GMT

- Microsoft Entra Cloud Sync agent must be installed on a domain-joined server. We recommend using Windows Server 2025 or Windows Server 2022. You can also deploy Microsoft Entra Cloud Sync on older Windows Server versions that are in extended support; however, support for this configuration may require [a paid support program](/lifecycle/policies/fixed#extended-support).

Related tenants in Tenant Governance

Thu, 30 Jul 2026 00:00:00 GMT

Learn how Microsoft Entra Tenant Governance discovers related tenants through identity, application, and billing signals across your organization

Use cross-tenant delegated administration

Thu, 30 Jul 2026 00:00:00 GMT

Learn how to use cross-tenant delegated administration to sign in to and manage governed tenants using your governing tenant credentials

Connect Health Agent Install

Wed, 29 Jul 2026 00:00:00 GMT

> If you have a highly locked-down and restricted environment, you need to add more URLs than the URLs the table lists for Internet Explorer enhanced security. Also add URLs that are listed in the table in the next section.

Microsoft Entra ID: Optimizations for passkey registration experience

Mon, 27 Jul 2026 00:00:00 GMT

Microsoft Entra ID is optimizing passkey registration via Registration Campaign, Authentication Strengths, and My Sign-Ins to improve compliance with passkey policies and prioritize local device passkeys. These changes, rolling out in late August 2026, require no user interface changes or action from organizations.

Access Token Claims Reference

Sat, 25 Jul 2026 00:00:00 GMT

| `exp` | int, a Unix timestamp | Specifies the expiration time before which the JWT can be accepted for processing. A resource may reject the token before this time as well. The rejection can occur for a required change in authentication or when a token is revoked. | |

Salesforce Sandbox Tutorial

Sat, 25 Jul 2026 00:00:00 GMT

* Manage your accounts in one central location.

Salesforce Tutorial

Sat, 25 Jul 2026 00:00:00 GMT

* Manage your accounts in one central location.

Use Scim To Provision Users And Groups

Sat, 25 Jul 2026 00:00:00 GMT

|Username and password (not recommended or supported by Microsoft Entra ID)|Easy to implement|Insecure - [Your Pa$$word doesn't matter](https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/your-pa-word-doesn-t-matter/ba-p/731984)|Not supported for new gallery or non-gallery apps.|