Daily.Entra.News
Aboutmerill.net
Cross-product topic

Developer

A cross-product view of Microsoft Entra changes related to Developer.

Latest Developer changes

Connect with the required scope

Developer

After creating a new application proxy application, grant admin consent for the **User.Read** delegated permission in the Microsoft Entra admin center or using the Microsoft Graph PowerShell.

V2 Protocols Oidc

Developer

1. Under Redirect URIs, add the redirect URI of your application. For example, `https://localhost:8080/`.

Validate Agent Tokens Downstream Api

Developer

Learn how to validate Microsoft Entra Agent ID tokens in a downstream API by checking the signature, issuer, audience, and agent identity marker claim.

Configure Third Party Agents

Developer

- [Configure Entra ID Auth SDK (sidecar) for agent identities](microsoft-entra-sdk-for-agent-identities.md)

Add app roles and get them from a token

Developer

Learn how to add app roles to an application registered in Microsoft Entra ID. Assign users and groups to these roles, and receive them in the 'roles' claim in the token.

Application Discovery

Developer

Use Application discovery to detect the applications accessed by users and create separate private applications.

Configure app multi-instancing

Developer

Learn about multi-instancing, which is needed for configuring multiple instances of the same application within a tenant.

Configure how users consent to applications

Developer

Configure user consent settings in Microsoft Entra ID to control when and how users grant permissions to your organization's data. Secure your environment with step‑by‑step guidance.

Configure the F5 BIG-IP Easy Button for Header-based and LDAP SSO

Developer

Learn to configure the F5 BIG-IP Access Policy Manager (APM) and Microsoft Entra ID for secure hybrid access to header-based applications that also require session augmentation through Lightweight Directory Access Protocol (LDAP) sourced attributes.

Don't validate access tokens for Microsoft Graph

Developer

Include file warning that access tokens for Microsoft Graph should be considered opaque and should never be validated by customer code. Only Microsoft Graph validates Microsoft Graph access tokens.

PowerShell samples in Application Management

Developer

These PowerShell samples are used for apps you manage in your Microsoft Entra tenant. You can use these sample scripts to find expiration information about secrets and certificates.

Private Access Segmentation Strategies

Developer

Learn best practices for transitioning from VPN replacement with Quick Access to per-application segmentation using Microsoft Entra Private Access.

Source IP anchoring with Global Secure Access

Developer

Configure Microsoft Entra Private Access to tunnel specific application traffic through a private network for application's network-based access control policy.

Howto Update Permissions

Developer

1. Identify the permissions your app requires, their permission IDs, and whether they're app roles (application permissions) or delegated permissions. For example, if you want to request Microsoft Graph permissions, see [Microsoft Graph permissions](/graph/permissions-reference#permission-scenarios) for a list of permissions and their IDs.

Validate Agent Tokens Downstream Api

Developer

:::image type="content" source="media/how-to-validate-agent-tokens-downstream-api/agent-token-flow-to-downstream-api.png" alt-text="Diagram showing the agent caller sending a Bearer token to the weather API, which verifies the token and calls Open-Meteo." lightbox="media/how-to-validate-agent-tokens-downstream-api/agent-token-flow-to-downstream-api.png":::

Managed Policies

Developer

Device code flow is rarely used by customers, but is frequently used by attackers. Enabling this Microsoft-managed policy for your organization helps remove this attack vector.

Entra Service Limits Include

Developer

| Schema extensions |<ul><li>String-type extensions can have a maximum of 256 characters. </li><li>Binary-type extensions are limited to 256 bytes.</li><li>Only 100 extension values, across *all* types and *all* applications, can be written to any single Microsoft Entra resource.</li><li>Only User, Group, TenantDetail, Device, Application, and ServicePrincipal entities can be extended with string-type or binary-type single-valued attributes.</li><li> Only the "equals" operator is supported for DateTime-type extensions. Range operators like "greater than" or "less than" are not supported.</li></ul> |

Using role-based access control for apps

Developer

Learn how to define application roles for your consumer and business customer applications and assign those roles to users and groups in external tenants.