Microsoft Entra ID will improve authentication strength to support passkeys stored on devices. Users will see new registration options in My Security Info. The rollout will begin in mid-May 2024 and is expected to complete by early August 2024. No action is needed to prepare for this change, but you may want to update relevant documentation.
Week of 13 May: replace Workload ID symmetric keys by 15 June; passkey support begins rolling out
The supplied period contains two Microsoft 365 Message Center notices, with no documented Entra content additions, updates, or removals. The most consequential change is the planned disablement of symmetric keys for Microsoft Entra first-party application service principals. Separately, Entra ID is beginning a staged authentication-strength improvement for device-stored passkeys.
- Workload ID will disable symmetric keys for first-party application service principals
Workload ID · Authentication
This Microsoft 365 Message Center major update describes a security-driven authentication behavior change. Organizations must switch from symmetric to asymmetric keys by 15 June 2024; otherwise, affected authentication attempts may fail.
- Entra ID authentication strength is being improved to support device-stored passkeys
Entra ID · Conditional Access
The rollout is scheduled to begin in mid-May 2024 and complete by early August 2024. Users will see new passkey registration options in My Security Info. The notice says no administrator preparation is needed; updating relevant documentation is optional.
Organizations using symmetric keys for Microsoft Entra first-party application service principals must replace them with asymmetric keys by 15 June 2024 to avoid authentication failures. No preparation is required for the Entra ID passkey rollout, although administrators may update relevant user documentation to reflect the new registration options.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Entra ID
1 updateMicrosoft Entra Workload ID
1 updateSymmetric keys for Microsoft Entra first-party applications' Service Principals will be disabled to enhance security. Organizations must switch to Asymmetric keys by June 15, 2024, to avoid authentication failures. Preparation involves replacing Symmetric with Asymmetric keys as detailed in the provided link.
