Daily.Entra.NewsA cross-product view of Microsoft Entra changes related to General.
The article now describes traffic forwarding through the Global Secure Access client and remote networks, six policies instead of three, Microsoft Traffic Bypass, Custom Acquire, and Agentic Acquire. It also expands Custom Bypass configuration steps to cover destination types, ports, and protocols.
Learn how to configure Microsoft Entra Internet Access and Microsoft Defender for Cloud Apps side by side without proxying traffic twice.
Learn about how Global Secure Access helps secure access to your corporate network by restricting access to external tenants.
Reference list of the egress IP ranges that Global Secure Access uses for outbound internet traffic, so you can allowlist them on target services.
In Microsoft Agent ID, the agent's identity, blueprint, and blueprint principal may all have sponsors associated with them. In addition, agents can have an [agent's user account](agent-users.md) created in order to access user-oriented services. While the Entra user has a sponsor relationship, there are differences between the user account sponsors and sponsors of the agent identity, blueprint, or blueprint principal.
Web content filtering also supports two optional rule conditions that enable traffic-aware policy enforcement:
With Explicit Forward Proxy, you can use the secure web and AI gateway capabilities of Microsoft Entra Internet Access without installing the Global Secure Access client. Explicit Forward Proxy works with any browser that supports proxy automatic configuration (PAC).
Learn about the new features and documentation improvements in Microsoft Entra role-based access control (RBAC).
IT administrators can now automatically accept SSO permissions on managed Windows devices using a supported registry setting.
Learn how to upload and host your own Proxy Auto-Configuration (PAC) files
Learn how to configure assignment restriction for a user-assigned managed identity in the Azure portal to scope it to specific resource providers.
Use the Migration Policy Analyzer to scan Azure AD B2C custom policies and generate a detailed migration assessment for Microsoft Entra External ID. Start your migration today.
This article lists all releases of Microsoft Entra Connect and Azure AD Sync.
Global Secure Access external user access licensing is supported through Microsoft Entra External ID subscription linking. The administrator must link the subscription in the resource tenant so guest users can access private resources and usage is billed correctly.
* [Federated MFA](/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa)
Learn to migrate from Amazon Cognito to Microsoft Entra External ID with step-by-step guidance, feature mapping, and validation strategies.
A Microsoft Entra documentation page was updated: Entra Customer Lockbox Approver.
- **HTTP method request filtering (preview)**: Block or allow specific HTTP methods, such as GET, POST, PUT, PATCH, and DELETE.
Learn how to configure universal tenant restrictions with Global Secure Access for Microsoft traffic.
Learn how to enable the Microsoft traffic profile in Global Secure Access, assign users, install the client, and verify traffic forwarding.
Learn about Microsoft traffic labs for Global Secure Access, including source IP restoration, compliant network checks, and universal tenant restrictions.
This article lists all releases of Microsoft Entra Connect and Azure AD Sync.
Learn how to retrieve data from Microsoft Entra Domain Services.
Learn about some of the virtual network design considerations and resources used for connectivity when you run Microsoft Entra Domain Services.
keywords: Azure Active Directory licensing service plans
Learn about tenant configurations in Microsoft Entra External ID, including the differences between workforce and external tenants.
This is a [privileged role](../privileged-roles-permissions.md). Assign the AI Reader role to users who need to do the following tasks:
Learn how to configure single sign-on between Microsoft Entra ID and AlexisHR.
Learn how to configure assignment restriction for a user-assigned managed identity in the Azure portal to scope it to specific resource providers.
Calculate the Microsoft Sentinel alert noise ratio for Global Secure Access detections and send an alert when false positives or informational closures exceed your threshold.
Check Global Secure Access-related administrator role assignments and identify accounts that need quarterly review.
Create a non-destructive Microsoft Entra recovery preview job scoped to directory objects that affect Global Secure Access.
Run a Microsoft Entra recovery job for directory objects that affect Global Secure Access after reviewing a recovery preview.
Verify that your Global Secure Access configuration backup runbook ran successfully. Send an alert when the runbook fails or misses a scheduled run.
Learn about the new features and documentation improvements in Microsoft Entra role-based access control (RBAC).
This article lists all releases of Microsoft Entra Connect and Azure AD Sync.
These articles provide additional information on working with groups in Microsoft Entra ID.
High-level planning and decision guide for Independent Software Vendors (ISVs) preparing to integrate single sign-on (SSO) with Microsoft Entra ID.
Zoom is available in the following [national cloud deployments](/graph/deployments).
Zscaler B2B User Portal is available in the following [national cloud deployments](/graph/deployments).
Zscaler Beta is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access Administrator is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSCloud is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSNet is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSOne is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSThree is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSTwo is available in the following [national cloud deployments](/graph/deployments).
Zscaler Private Access (ZPA) is available in the following [national cloud deployments](/graph/deployments).
Zscaler Private Access Administrator is available in the following [national cloud deployments](/graph/deployments).
The export.csv file contains all changes that are about to be exported. Each row corresponds to a change for an object in the connector space and the object is identified by the DN attribute. The DN attribute is a unique identifier assigned to an object in the connector space. When you have many rows/changes in the export.csv to analyze, it may be difficult for you to figure out which objects the changes are for based on the DN attribute alone. To simplify the process of analyzing the changes, use the `csanalyzer.ps1` PowerShell script. The script retrieves common identifiers (for example, displayName, userPrincipalName) of the objects. To use the script:
|[2.5.79.0](#25790)|23 Oct 2026 (12 months after release of 2.5.190.0)|
* If needed, [create a Microsoft Entra tenant][create-azure-ad-tenant] or [associate an Azure subscription with your account][associate-azure-ad-tenant].
- [Enable Global Secure Access signaling for Microsoft Entra ID and Microsoft Graph](how-to-source-ip-restoration.md#enable-global-secure-access-signaling-for-microsoft-entra-id-and-microsoft-graph)
Learn about the pricing and billing structure for Microsoft Entra External ID, along with steps for linking an external tenant to an Azure subscription.
- [Enable Global Secure Access signaling for Microsoft Entra ID and Microsoft Graph](how-to-source-ip-restoration.md#enable-global-secure-access-signaling-for-microsoft-entra-id-and-microsoft-graph)
Add group members in bulk by using a comma-separated values (CSV) file.
Download group members in bulk in the Microsoft Entra admin center.
Remove group members in bulk operations by using a comma-separated values (CSV) file.
>Editing a group (adding or removing users), it can take up to 24 hours for changes to take effect.
Learn how agent registry experiences are converging under Microsoft Agent 365, what the change means for Microsoft Entra Agent ID, and how to view all agents in your organization.
Find answers to frequently asked questions about Microsoft Entra External ID. Learn about pricing, features, and the future of Azure AD B2C and External Identities.
Learn how to assign Azure roles to the local administrators group of a Windows device.
Explains the steps that are required to implement Microsoft Entra joined devices in your environment.
Learn how to manage agent identities in the end user experience within Microsoft Entra. View, control, and take action on agents you own or sponsor with ease.
- For Office 365 Exchange Online: `EAS.AccessAsUser.All`, `EWS.AccessAsUser.All`, `IMAP.AccessAsUser.All`, `POP.AccessAsUser.All`.
Microsoft Entra Joined Device Local Administrator
This article tracks the released versions of the Microsoft Entra Private Access Sensor and the changes in each version.
Deploy n8n on Azure Container Apps and secure AI agent workflows with Microsoft Entra Agent ID and Microsoft Graph MCP Server for Enterprise.
Access Microsoft Entra admin center to view and filter agent identities. Streamline tenant oversight with search, filters, and column customization.
| `jobTitle` |Any string value or `null` | ```user.jobTitle -eq "value"``` |
Deploy n8n on Azure Container Apps and secure AI agent workflows with Microsoft Entra Agent ID and Microsoft Graph MCP Server for Enterprise.
Learn how to add and manage owners and sponsors for agent identity blueprints and agent identities in the Microsoft Entra admin center.
Learn how agent registry experiences are converging under Microsoft Agent 365, what the change means for Microsoft Entra Agent ID, and how to view all agents in your organization.
Describes the deprecation of the app manifest (Azure AD Graph format) and attribute differences in the new format.
Learn about how authorization in Microsoft Entra Agent ID works for AI agents.
Learn what features are available in Microsoft Entra B2B collaboration in US Government and national clouds
Learn how to check the health of a Microsoft Entra Domain Services managed domain and understand status messages.
