Microsoft Entra RSAC 2026 Identity Security Updates

Introduction

Microsoft’s RSAC 2026 Entra announcements reflect a major shift in identity security: organizations now need to protect not just users and devices, but also AI agents, workloads, and multi-tenant environments. For IT and security teams, these updates reinforce Microsoft’s push toward an identity-first, Zero Trust access fabric that can evaluate risk continuously and respond in real time.

What’s new in Microsoft Entra

Protecting AI agent identities

Microsoft is expanding Microsoft Entra Agent ID as the identity foundation for Microsoft Agent 365. New capabilities include:

• ID Governance access packages integrated into Agent 365 Security Policy Templates
• Conditional Access policy extensions for agents acting on behalf of users
• Real-time access decisions based on risk signals and custom security attributes

This brings agent identities closer to the same governance and access controls already used for users, apps, and devices.

Securing employee access in the AI era

Microsoft Entra Internet Access is gaining several important controls for AI usage:

• Shadow AI detection to discover unsanctioned AI apps and enforce Conditional Access policies
• Prompt injection protection to block malicious prompts
• Synced passkeys and passkey profiles now generally available
• Microsoft Entra Passkeys on Windows in preview
• External MFA integration now generally available for third-party MFA providers
• Adaptive risk remediation coming generally available in April 2026 for self-service recovery across authentication methods

Together, these updates support phishing-resistant authentication and tighter governance over AI-enabled access.

Strengthening the identity foundation

Microsoft also introduced new resilience and governance features for complex tenant environments:

• Microsoft Entra Backup and Recovery for point-in-time restore of critical directory objects (preview)
• Microsoft Entra Tenant Governance to discover, monitor, and govern multi-tenant estates (preview)
• Tenant configuration API for JSON-based configuration baselines (preview)
• Cross-tenant group synchronization for governed access across related tenants (preview)

Why this matters for IT admins

These announcements are especially relevant for administrators managing hybrid identity, Zero Trust initiatives, and growing AI adoption. The addition of controls for agent identities helps close a gap that many organizations are only beginning to recognize, while backup, recovery, and tenant governance features address operational risk in large or distributed Microsoft environments.

For end users, the impact should be more seamless and secure access through passkeys and adaptive remediation, with less dependency on passwords and help desk intervention.

Action items

• Review where AI agents and unsanctioned AI tools are already in use across your environment.
• Evaluate passkey deployment readiness, especially for Windows-based users.
• Identify whether external MFA integration could simplify your current authentication architecture.
• Plan for preview testing of Backup and Recovery and Tenant Governance if you operate multiple Entra tenants.
• Reassess Conditional Access strategy to account for non-human identities and new risk signals.

Microsoft’s RSAC 2026 message is clear: identity security must now extend across people, apps, devices, and AI agents alike.