Microsoft Entra RSAC 2026 Identity Security Updates
摘要
At RSAC 2026, Microsoft announced major Microsoft Entra updates aimed at securing not only users and devices but also AI agents, workloads, and modern multi-tenant environments. The new capabilities—such as expanded Entra Agent ID governance, shadow AI detection, prompt injection protection, passkey enhancements, and adaptive risk-based access—matter because they strengthen Zero Trust identity security as organizations adopt AI and face more dynamic access risks.
Introduction
Microsoft’s RSAC 2026 Entra announcements reflect a major shift in identity security: organizations now need to protect not just users and devices, but also AI agents, workloads, and multi-tenant environments. For IT and security teams, these updates reinforce Microsoft’s push toward an identity-first, Zero Trust access fabric that can evaluate risk continuously and respond in real time.
What’s new in Microsoft Entra
Protecting AI agent identities
Microsoft is expanding Microsoft Entra Agent ID as the identity foundation for Microsoft Agent 365. New capabilities include:
- ID Governance access packages integrated into Agent 365 Security Policy Templates
- Conditional Access policy extensions for agents acting on behalf of users
- Real-time access decisions based on risk signals and custom security attributes
This brings agent identities closer to the same governance and access controls already used for users, apps, and devices.
Securing employee access in the AI era
Microsoft Entra Internet Access is gaining several important controls for AI usage:
- Shadow AI detection to discover unsanctioned AI apps and enforce Conditional Access policies
- Prompt injection protection to block malicious prompts
- Synced passkeys and passkey profiles now generally available
- Microsoft Entra Passkeys on Windows in preview
- External MFA integration now generally available for third-party MFA providers
- Adaptive risk remediation coming generally available in April 2026 for self-service recovery across authentication methods
Together, these updates support phishing-resistant authentication and tighter governance over AI-enabled access.
Strengthening the identity foundation
Microsoft also introduced new resilience and governance features for complex tenant environments:
- Microsoft Entra Backup and Recovery for point-in-time restore of critical directory objects (preview)
- Microsoft Entra Tenant Governance to discover, monitor, and govern multi-tenant estates (preview)
- Tenant configuration API for JSON-based configuration baselines (preview)
- Cross-tenant group synchronization for governed access across related tenants (preview)
Why this matters for IT admins
These announcements are especially relevant for administrators managing hybrid identity, Zero Trust initiatives, and growing AI adoption. The addition of controls for agent identities helps close a gap that many organizations are only beginning to recognize, while backup, recovery, and tenant governance features address operational risk in large or distributed Microsoft environments.
For end users, the impact should be more seamless and secure access through passkeys and adaptive remediation, with less dependency on passwords and help desk intervention.
Action items
- Review where AI agents and unsanctioned AI tools are already in use across your environment.
- Evaluate passkey deployment readiness, especially for Windows-based users.
- Identify whether external MFA integration could simplify your current authentication architecture.
- Plan for preview testing of Backup and Recovery and Tenant Governance if you operate multiple Entra tenants.
- Reassess Conditional Access strategy to account for non-human identities and new risk signals.
Microsoft’s RSAC 2026 message is clear: identity security must now extend across people, apps, devices, and AI agents alike.
获取微软技术最新资讯