Daily.Entra.News
Aboutmerill.net
← Previous week
Next week →
Week in brief

Entra ID credential UX refresh is the clearest rollout; the week otherwise centers on security and documentation guidance

The week of 25 August 2025 was primarily a documentation-maintenance cycle: 22 Microsoft Learn items were updated, with no new or removed items, alongside one Entra ID Message Center notice. That notice says a refreshed credential enrollment and management experience will roll out in early November 2025, improving usability and accessibility without changing functionality. The other substantive entries are security guidance or documentation describing governance and native-auth implementation details. The supplied evidence does not identify a newly generally available feature, retirement, or tenant-wide behavior change. The What's New Archive edit is a navigation change, and its link to “What's new (preview)” is not evidence of a new preview feature. Similarly, the Mandatory Multifactor Authentication entry has no substantive summary here and does not support a claim of a new MFA mandate.

  • Entra ID · Security
    Entra ID credential enrollment and management UX will refresh in early November

    The Message Center announcement says Microsoft Entra will roll out a refreshed credential enrollment and management user experience in early November 2025. It is described as a usability and accessibility improvement with no functionality change. No action is required, although Microsoft recommends informing help-desk teams; this is a UX rollout, not a new authentication capability, GA announcement, or retirement.

  • Entra ID · Security
    Emergency-access guidance recommends two cloud-only Global Administrator accounts

    An updated Entra ID security entry recommends two cloud-only emergency access accounts permanently assigned the Global Administrator role. The accounts are not assigned to specific individuals and are reserved for emergency or break-glass situations when normal accounts cannot be used or administrators are locked out. This is security guidance, not evidence of a newly shipped control.

  • Entra ID · Authentication
    Certificate-based authentication guidance emphasizes recurring CRL validation

    The Certificate Based Authentication Certificate Revocation List update calls for regular tests confirming that CRLs are downloadable and correctly recognized by Microsoft Entra ID. This is operational and security guidance for existing CBA deployments; no changed revocation behavior or availability status is stated.

  • ID Governance · Governance
    ID Governance documentation details access-package cleanup and delegated approvals

    The Lifecycle Workflow Tasks page describes a task that removes all access package assignments for users. A separate My Access update explains that approval delegation lets an approver assign another individual to respond to access-package approval requests on their behalf when the approver is unavailable. These are documentation updates describing capabilities; the supplied evidence does not label either as new, preview, or generally available.

  • Entra ID · Authentication
    Native Authentication React tutorials update reset-password and sign-up implementation steps

    Two Entra ID tutorial updates point developers to sample components for a React single-page app: NewPasswordForm.tsx for password reset and CodeForm.tsx for sign-up. CodeForm collects a one-time passcode and is required for either email-with-password or email-with-one-time-passcode authentication. This is a tutorial and sample-code update, not a stated platform launch or behavior change.

For Entra administrators

Brief help-desk teams about the November credential UX transition; the notice says no administrator action is required and identifies no compliance issues. For certificate-based authentication, the evidence supports regular CRL validation, while the emergency-access entry provides a recommendation to compare against the tenant's current setup. Governance and native-auth updates matter to teams using those capabilities, but they do not support a broader configuration rollout.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Authentication

5

Tutorial Native Authentication Single Page App React Sdk Reset Password

Updated

1. Create *reset-password/components/NewPasswordForm.tsx* file, then paste the code from [reset-password/components/NewPasswordForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/reset-password/components/NewPasswordForm.tsx). This component displays a form that collects a user's new password.

27 August 2025

Tutorial Native Authentication Single Page App React Sdk Sign Up

Updated

1. Create a *sign-up/components/CodeForm.tsx* file, then paste the code from [sign-up/components/CodeForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/sign-up/components/CodeForm.tsx). This component displays a form that collects a one-time passcode sent to the user. You require this form for either email with password or email with one-time passcode authentication method.

27 August 2025

Fundamentals

4

Configure Security

Updated

A Microsoft Entra documentation page was updated: Configure Security.

29 August 2025

Find Tenant

Updated

2. Browse to **Entra ID** > **Overview** > **Properties**.

29 August 2025

Whats New Archive

Updated

For a more dynamic experience, you can now find the archive information in the Microsoft Entra admin center. To learn more, see [What's new (preview)](./whats-new-overview.md).

26 August 2025

Whats New

Updated

A Microsoft Entra documentation page was updated: Whats New.

26 August 2025

General

3

Security

2

risklevel: High

Updated

Microsoft recommends that organizations have two cloud-only emergency access accounts permanently assigned the [Global Administrator](/entra/identity/role-based-access-control/permissions-reference#global-administrator) role. These accounts are highly privileged and aren't assigned to specific individuals. The accounts are limited to emergency or "break glass" scenarios where normal accounts can't be used or all other administrators are accidentally locked out.

29 August 2025

Standards

1

Governance

2

Delegate Approvals My Access

Updated

Approval delegation in My Access allows approvers to assign another individual to respond to access package approval requests on their behalf. This feature helps maintain productivity when approvers are unavailable due to leave, travel, or other commitments.

27 August 2025

Fundamentals

1

Lifecycle Workflow Tasks

Updated

Allows you to remove all access package assignments for users. For more information on access packages, see [What are access packages and what resources can I manage with them?](entitlement-management-overview.md#what-are-access-packages-and-what-resources-can-i-manage-with-them).

30 August 2025

General

3

Applies To Workforce External

Updated

**Applies to**: ![Green circle with a white check mark symbol that indicates the following content applies to workforce tenants.](../media/common/applies-to-yes.png) Workforce tenants ![Green circle with a white check mark symbol that indicates the following content applies to external tenants.](../media/common/applies-to-yes.png) External tenants ([learn more](/entra/external-id/tenant-configurations))

26 August 2025

Architecture

1

Gsa Poc Private Access

Updated

When customers deploy the 3P solution, they might want to use Microsoft Entra Private Access while using other solutions for internet access. For guidance, see [Partner ecosystem overview](../global-secure-access/partner-ecosystems-overview.md).

29 August 2025

General

1

Points Of Presence

Updated

The table lists the deployment status for the APAC region.

29 August 2025