Latest news and updates about Entra ID.
Microsoft is positioning identity-first access as a better alternative to traditional VPN-centric remote access. By combining Conditional Access with Global Secure Access, organizations can apply Zero Trust policies consistently across SaaS, AI apps, on-premises resources, and internet traffic.
Microsoft Entra's July 2026 updates introduce several identity and access improvements, led by the general availability of Entra Backup and Recovery and new BYOD support for Global Secure Access. Microsoft also previewed stronger Conditional Access controls for AI agents and announced security enhancements in Microsoft Authenticator, giving IT teams more resilience, flexibility, and governance options.
Microsoft has expanded Microsoft Entra integrations with SAP to help organizations modernize identity management as they move away from SAP IDM and other on-premises tools. New capabilities for provisioning, account discovery, OAuth 2.0 authentication, and SAP role governance can help IT teams unify lifecycle management and access governance across SAP and non-SAP apps.
Microsoft Entra ID is tightening the security of branded sign-in pages by retiring support for custom CSS positioning properties starting October 26, 2026. Organizations that use these properties in company branding should review and remove them now to avoid layout changes and maintain a trusted sign-in experience.
Microsoft has announced new Microsoft Entra Internet Access and Private Access capabilities to secure AI, web, and private app traffic with Zero Trust controls. The update adds public preview features for network DLP, AI agent controls, and agentic scenarios, while generally available features expand secure access for BYOD, kiosk devices, and MCP traffic visibility.
Microsoft has made the Migration Policy Analyzer generally available to help organizations assess Azure AD B2C custom policies before moving to Microsoft Entra External ID. The tool generates a structured migration assessment, helping IT teams understand current implementations, identify gaps, and prioritize migration work faster.
Microsoft is urging organizations to treat AI agent governance as an immediate identity and access problem, not a future concern. Based on feedback from identity professionals at Identiverse 2026, the company highlights unmanaged agent sprawl, orphaned agents, and weak agent-to-agent controls, while positioning Microsoft Entra Agent ID and Agent 365 as the foundation for inventory, ownership, and policy enforcement.
Microsoft has announced general availability of agent identity governance capabilities in Microsoft Entra as part of Microsoft Agent 365. The update helps organizations govern AI agents with dedicated identities, named sponsors, access packages, and lifecycle workflows to reduce overprivileged access and improve accountability.
Microsoft has announced a public preview that extends data protection to the network layer using Microsoft Purview and Microsoft Entra. The integration helps organizations detect and block sensitive data moving to unmanaged SaaS, personal cloud storage, and generative AI apps in real time, reducing data leakage risk before exposure occurs.
Microsoft has introduced preview support for custom extensions in Microsoft Entra Privileged Identity Management, allowing organizations to call a REST API during role activation to enforce business-specific rules. This helps IT teams automate checks such as ticket validation, HR status, compliance gates, and on-call logic while improving auditability and reducing manual approval gaps.
Microsoft Entra Backup and Recovery is now generally available for customers with Entra ID P1 or P2, bringing built-in recovery for critical identity objects across workforce tenants. The release extends retention from 5 to 7 days and adds more flexibility for snapshots, difference reports, and recovery jobs, helping IT teams respond faster to accidental or malicious changes.
Microsoft has launched a three-part Microsoft Entra and Purview webinar series focused on securing AI at scale. The sessions cover identity, access, data protection, browser and network controls, and governance for AI agents, giving IT teams practical guidance for safer AI adoption.