Latest news and updates about Entra ID.
Microsoft has made browser-based authentication for external identity providers generally available for supported Microsoft app sign-ins on Android, iOS, and managed macOS. This lets federated Microsoft 365 users use passkeys, FIDO2 security keys, and eligible SSO sessions in apps like Outlook, Teams, and OneDrive, reducing password fallback and embedded web view limitations.
Microsoft is promoting upcoming webinars focused on securing multi-tenant environments with Microsoft Entra Tenant Governance, now generally available. The sessions highlight how organizations can detect shadow tenants, apply consistent governance, and build a stronger identity foundation for AI readiness.
Microsoft has launched a public preview of self-service onboarding for new Microsoft Entra App Gallery applications. The new workflow lets publishers validate OIDC, SAML, and provisioning integrations before submission, then create, submit, and track app listings in the Entra admin center, reducing delays and rework.
Microsoft is positioning Entra Private Access as a practical replacement for traditional VPNs, using identity-driven, per-app access instead of broad network tunnels. The guidance outlines a phased migration approach that helps IT teams reduce attack surface, strengthen Zero Trust controls, and simplify remote access operations.
Microsoft has announced general availability of HiBob’s native integration with Microsoft Entra, enabling HR-driven identity lifecycle automation for joiners, movers, and leavers. The integration helps IT teams govern provisioning and access changes across hybrid and cloud environments while reducing manual processes and security risk.
Microsoft Entra's September 2026 updates introduce new tenant governance, user-centric access reviews, lifecycle workflow cloning, and passwordless resource accounts for Teams devices. The release also adds cloud-to-AD provisioning, AI-focused MCP Firewall protections, and important deadlines for MemberOf-based configurations and permission scope changes.
Microsoft Entra now supports instant revocation of CAE-enabled service principal bearer tokens, giving security teams a faster kill switch for compromised workload identities. By adding the cp1 client capability claim, admins can invalidate tokens on high-risk, disabled, or deleted service principals instead of waiting 60 to 90 minutes for token expiry.
Microsoft says organizations should stop viewing Active Directory as the default identity foundation for modern IT. As cloud apps, external users, and AI agents expand identity needs, Microsoft Entra ID offers stronger security, simpler operations, and a better path for future investments.
Microsoft has published implementation guidance for enforcing Zero Trust consistently across AI apps, SaaS, on-premises apps, and internet resources using Conditional Access and Global Secure Access. The guidance matters for IT teams because it emphasizes phased rollout, report-only testing, and unified identity-first controls to reduce VPN dependence without disrupting users.
Microsoft Entra's August 2026 updates add new admin controls for Windows SSO prompts, Exchange Online attribute writeback, and several Lifecycle Workflows enhancements now generally available. Microsoft also introduced public previews for AD device sync with Cloud Sync, sponsorless guest cleanup automation, and GPO backup and restore in Entra Domain Services, giving identity teams more control, automation, and migration flexibility.
Microsoft Entra Tenant Governance is now generally available, giving organizations a built-in way to discover, govern, and monitor multiple Microsoft tenants from a central control plane. The release matters for IT and security teams managing complex tenant estates because it helps reduce shadow tenant risk, enforce consistent baselines, and detect configuration drift across services like Entra, Intune, Defender, Exchange Online, Purview, and Teams.
Microsoft is positioning identity-first access as a better alternative to traditional VPN-centric remote access. By combining Conditional Access with Global Secure Access, organizations can apply Zero Trust policies consistently across SaaS, AI apps, on-premises resources, and internet traffic.