Microsoft Entra

1. New feature

   IDV partner gallery update

   IDV partner gallery update : Added HYPR as a new partner in the Verified ID API-based integration partners section.

   DocsMicrosoft Entra Verified ID - IDV partner galleryNew

   Microsoft Entra Verified ID - IDV partner gallery Explore Microsoft Entra Verified ID identity verification partners and integrations for remote onboarding, secure access, and account recovery.

   Listed under October 2026 on Microsoft Learn

1. New feature

   Upcoming change - Improved restore experience for device-bound Authenticator app passkeys on iOS

   Type: Plan for change Service category: Microsoft Authenticator App Product capability: Identity Security & Protection No action is required. What is changing? Starting August 2026, users will see an improved restore experience for device-bound Authenticator app passkeys for iOS users…

   Docsback-up-account-credentials-in-microsoft-authenticator-bb939936-7a8d-4 …

   Listed under June 2026 on Microsoft Learn Action may be required
2. Preview

   Public Preview - Prevent unauthorized changes to AD groups with AD group enforcement

   Type: New feature Service category: Provisioning Product capability: Entra Cloud Sync For customers leveraging group provisioning to AD, this capability ensures that changes to AD groups remain consistent with those managed in Microsoft Entra. With this preview, you can designate…

   DocsAD group enforcement documentation

   Listed under June 2026 on Microsoft Learn
3. Preview

   Public Preview - New built-in Entra role for SOC identity response in Microsoft Defender

   Type: New feature Service category: RBAC Product capability: Identity Security & Protection Starting June 8 we're introducing a new built-in role in Microsoft Entra— SOC Identity Responder —to further improve how security teams execute identity containment actions initiated from Microsoft…

   Listed under June 2026 on Microsoft Learn
4. Preview

   Public Preview - Extended Conditional Access protections for Agent's user accounts

   Type: New feature Service category: Conditional Access Product capability: Identity Security & Protection Conditional Access now provides broader controls to secure AI agents that have a user account. Administrators can: Target agent's user accounts with greater precision by including or…

   DocsTarget agents in Microsoft Entra Conditional Access policiesUpdated

   Target agents in Microsoft Entra Conditional Access policies Learn how to select and target agent identities in Microsoft Entra Conditional Access policies using the object picker, blueprints, and custom security attributes.

   Listed under June 2026 on Microsoft Learn
5. GA

   Generally available - Jailbreak/Root Detection in Authenticator App

   Type: New feature Service category: Microsoft Authenticator App Product capability: Identity Security & Protection Microsoft Authenticator introduced jailbreak/root detection for Microsoft work or school accounts in the Authenticator app. Users with rooted/jailbroken devices will be blocked from adding/using work or…

   Listed under June 2026 on Microsoft Learn Action may be required
6. GA

   General availability - Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows

   Type: Changed feature Service category: Authentications (Logins) Product capability: User Authentication General availability of Microsoft Entra Kerberos key rotation improved reliability particularly for environments using incoming trust referral flows. Previously, authentication failures could occur during Kerberos key rotation if referral…

   DocsConfigure Microsoft Entra Kerberos trustNew

   Configure Microsoft Entra Kerberos trust Learn how to configure and manage Microsoft Entra Kerberos trust between Microsoft Entra ID and Active Directory Domain Services.

   Listed under June 2026 on Microsoft Learn
7. GA

   General Availability - SCIM 2.0 APIs for Microsoft Entra ID in US Gov cloud

   Type: New feature Service category: Provisioning Product capability: Identity Lifecycle Management SCIM 2.0 APIs are now generally available in the US Gov cloud, giving customers, developers, and partners a standards-based option for managing users and groups in Microsoft Entra using…

   DocsEnable the SCIM Provisioning API in Microsoft Entra ID

   Enable the SCIM Provisioning API in Microsoft Entra ID Learn how to enable the SCIM Provisioning API feature in the Microsoft Entra admin center and link an Azure subscription for billing.

   Listed under June 2026 on Microsoft Learn
8. GA

   General Availability - Microsoft Entra Backup and Recovery is now available

   Type: New feature Service category: Entra Backup and Recovery Product capability: Entra Backup and Recovery Microsoft Entra Backup and Recovery is a built-in solution to help restore your tenant after accidental changes or malicious updates. Always on by default, it…

   DocsMicrosoft Entra Backup and Recovery overviewUpdated

   Microsoft Entra Backup and Recovery overview Learn how Microsoft Entra Backup and Recovery helps you recover from malicious attacks or accidental changes to tenant objects

   Listed under June 2026 on Microsoft Learn Roadmap 567885Related post
9. GA

   General Availability - External users can be directly assigned to Access Packages

   Type: New feature Service category: Entitlement Management Product capability: Identity Governance This feature allows Entitlement Management admins to directly assign external users who are not in the directory to an access package using the user's email. Users are invited into…

   Listed under June 2026 on Microsoft Learn
10. GA

    General Availability - Domainless SAML IdP federation for workforce tenants

    Type: New feature Service category: B2B Product capability: B2B/B2C Domainless SAML federation with a SAML Identity Provider allows external users to authenticate into your apps or workforce resources using their IdP-managed credentials, regardless of their email domain. Domainless federation removes…

    DocsAdd a SAML/WS-Fed identity providerNew

    Add a SAML/WS-Fed identity provider Set up direct federation with SAML 2.0 or WS-Fed identity providers so users can sign in with work accounts. Understand attributes and claims for federation.

    Listed under June 2026 on Microsoft Learn
11. GA

    General Availability - BYOD support for Windows client using Entra registration

    Type: New feature Service category: BYOD Product capability: Network Access We are excited to announce Bring Your Own Device (BYOD) support for Windows client using Entra-registered devices is now generally available. You can now enable users and partners to access…

    DocsLearn about bring your own device (BYOD) with the Global Secure Access …

    Learn about bring your own device (BYOD) with the Global Secure Access clients for Microsoft Entra Private Access and Microsoft Entra Internet Access - Global Secure Access Learn about bring your own device (BYOD) with the Global Secure Access clients for Microsoft Entra Private Access and Microsoft Entra Internet Access.

    Listed under June 2026 on Microsoft Learn

1. New feature

   Upcoming change - Enhanced admin authorization for Microsoft Entra Connect Sync configuration changes

   Type: Changed feature Service category: Entra Connect Product capability: Entra Connect We're enhancing the security posture of Microsoft Entra Connect Sync by introducing interactive admin authorization for configuration changes. With this update, an authorized administrator will need to sign in…

   DocsMicrosoft Entra Connect: Version release historyNew·Microsoft Entra Connect

   Microsoft Entra Connect: Version release history This article lists all releases of Microsoft Entra Connect and Azure AD Sync.

   Listed under May 2026 on Microsoft Learn
2. Preview

   Public Preview - Workload identity-based authentication for SAP SuccessFactors provisioning integrations

   Type: New feature Service category: Provisioning Product capability: Inbound to Entra ID Microsoft Entra is introducing workload identity–based authentication for SAP SuccessFactors provisioning. This new capability allows the Microsoft Entra provisioning service to authenticate to SAP SuccessFactors using Entra workload…

   DocsConfigure SuccessFactors inbound provisioning in AD and Microsoft …·Configure SuccessFactors inbound provisioning in Microsoft Entra ID·Configure SAP SuccessFactors writeback in Microsoft Entra ID·https://aka.ms/EntraSAPSFConnectivityGuide

   Configure SuccessFactors inbound provisioning in AD and Microsoft Entra ID Learn how to configure inbound provisioning from SuccessFactors

   Listed under May 2026 on Microsoft Learn
3. Preview

   Public Preview - Sensitivity labels for Microsoft Entra security groups

   Type: New feature Service category: Group Management Product capability: Platform Microsoft Entra ID now supports applying Microsoft Purview sensitivity labels to Entra cloud security groups in public preview. Administrators can use labels to govern security group settings such as guest…

   Listed under May 2026 on Microsoft Learn
4. Preview

   Public Preview - Enable soft-delete for Microsoft Entra Device objects

   Type: New feature Service category: Device Access Management Product capability: Entra Backup and Recovery Device Soft Delete, now available in preview, enables administrators to safely remove device objects by moving them to a recoverable state instead of permanently deleting them…

   Listed under May 2026 on Microsoft Learn
5. Preview

   Public Preview - Azure Role assignments can now be governed via Entitlement Management

   Type: New feature Service category: Entitlement Management Product capability: Identity Governance You can now govern eligible and active assignments to Azure roles at the Management Group, Subscription, and Resource Group levels directly through access packages. This brings role assignment into…

   Listed under May 2026 on Microsoft Learn
6. Preview

   Public Preview - Automate setting or clearing user attributes values in Lifecycle workflows

   Type: New feature Service category: Lifecycle Workflows Product capability: Identity Governance We're excited to introduce the User Attribute Updates task in Lifecycle Workflows, extending existing attribute change trigger capabilities with a built-in, customer-ready way to automate attribute updates (set or…

   Listed under May 2026 on Microsoft Learn
7. Retirement

   Non-FIPS compliant signing keys (P-256K) retirement

   Non-FIPS compliant signing keys (P-256K) retirement : Non-FIPS compliant signing keys (P-256K) will be retired on July 1, 2026. If you haven't already, upgrade your signing keys to become FIPS compliant.

   DocsUpgrade signing keys

   Upgrade signing keys Learn how to upgrade Microsoft Entra Verified ID signing keys to become FIPS compliant.

   Listed under May 2026 on Microsoft Learn
8. GA

   Microsoft Entra ID account recovery

   Microsoft Entra ID account recovery : Microsoft Entra ID account recovery with Verified ID is now generally available. For more information, see plan your verification solution .

   DocsPlan your Microsoft Entra Verified ID verification solution

   Plan your Microsoft Entra Verified ID verification solution Learn foundational information to plan and design your verification solution.

   Listed under May 2026 on Microsoft Learn Roadmap 529856
9. New feature

   IDV partner gallery: 2 new Security Store partners

   IDV partner gallery: 2 new Security Store partners : Added 1Kosmos and CLEAR to the IDV partner gallery as Security Store integration partners.

   DocsMicrosoft Entra Verified ID - IDV partner galleryNew·1Kosmos·CLEAR

   Microsoft Entra Verified ID - IDV partner gallery Explore Microsoft Entra Verified ID identity verification partners and integrations for remote onboarding, secure access, and account recovery.

   Listed under May 2026 on Microsoft Learn
10. GA

    General Availability - System-preferred authentication expanded to first-factor in Microsoft Entra ID

    Type: General Availability Service category: MFA Product capability: Identity Security & Protection We're extending system-preferred authentication to apply to the first factor in Microsoft-managed configurations (in addition to second factor). With this change, the system evaluates the credentials registered for…

    Listed under May 2026 on Microsoft Learn
11. GA

    General Availability - Support for passkeys in Microsoft Entra ID registration campaign

    Type: General Availability Service category: MFA Product capability: Identity Security & Protection Microsoft Registration Campaigns now supports Passkeys (FIDO2) as an authentication method. Administrators can configure registration campaigns to nudge users to register passkeys during sign-in, helping organizations drive passkey…

    Listed under May 2026 on Microsoft Learn
12. GA

    General Availability - NetBiosName resolution test now informational

    Type: Changed feature Service category: Entra Connect Product capability: Entra Connect The “NetBIOS Name Sysvol Connectivity resolution” test in the AD DS health monitoring agent has been reclassified from an alerting test to an informational test. Going forward, if this…

    Listed under May 2026 on Microsoft Learn
13. GA

    General Availability - Modernized My Account pages

    Type: Changed feature Service category: Modernized My Account pages Product capability: End User Experiences We're excited to announce the upcoming general availability of three redesigned pages in the My Account portal (myaccount.microsoft.com), bringing a modernized experience to help end users…

    Listed under May 2026 on Microsoft Learn
14. GA

    General Availability - Manage Agent ID sponsorship lifecycle with Lifecycle Workflows

    Type: General Availability Service category: Lifecycle Workflows Product capability: Identity Governance One of the most important parts of governing agent identities is making sure that a delegated human user is always assigned to make sure the agent identity's access to…

    DocsAgent identity sponsor tasks in Lifecycle Workflows

    Agent identity sponsor tasks in Lifecycle Workflows This article describes workflow tasks that involve sponsors of agent identities.

    Listed under May 2026 on Microsoft Learn
15. GA

    General Availability - High Scale Compatibility (HSC) mode for Microsoft Entra External ID

    Type: General Availability Service category: B2C - Consumer Identity Management Product capability: B2B/B2C High Scale Compatibility (HSC) mode enables organizations to migrate to Microsoft Entra External ID while preserving their existing user directory . It's designed for large, established customer…

    DocsEnable External ID High Scale Compatibility (HSC) mode

    Enable External ID High Scale Compatibility (HSC) mode Enable HSC mode on your Azure AD B2C tenant to adopt Microsoft Entra External ID endpoints while keeping existing users and credentials in place.

    Listed under May 2026 on Microsoft Learn
16. GA

    General Availability - Cross tenant group synchronization

    Type: General Availability Service category: Provisioning Product capability: Identity Lifecycle Management Cross tenant group synchronization allows organizations to synchronize security groups across Microsoft Entra tenants. This feature enables centralized management of group membership in a source tenant while making those…

    DocsWhat is cross-tenant synchronization in Microsoft Entra ID?New

    What is cross-tenant synchronization in Microsoft Entra ID? Learn about cross-tenant synchronization in Microsoft Entra ID.

    Listed under May 2026 on Microsoft Learn
17. GA

    General Availability - Account Discovery

    Type: General Availability Service category: Provisioning Product capability: 3rd Party Integration Account discovery for connected applications is now generally available in Microsoft Entra ID Governance. This capability provides administrators with visibility into all accounts that exist within connected applications, including…

    Docshttps://aka.ms/accountDiscoveryDocumentation

    Listed under May 2026 on Microsoft Learn
18. New feature

    Face Check device security FAQ

    Face Check device security FAQ : Added frequently asked questions about device security requirements for Face Check on Android and iOS devices.

    DocsTutorial - Use Face Check with Microsoft Entra Verified ID

    Tutorial - Use Face Check with Microsoft Entra Verified ID Learn how to set up and use Face Check with Microsoft Entra Verified ID for high-assurance facial matching verifications that protect user privacy at enterprise scale.

    Listed under May 2026 on Microsoft Learn
19. New feature

    Expanded policy storage for passkeys (FIDO2) in Microsoft Entra ID

    Type: Changed feature Service category: Authentications (Logins) Product capability: User Authentication We increased the passkey (FIDO2) policy size limit in the authentication methods policy to a dedicated 20-KB allocation. Previously, all authentication methods shared a single 20-KB policy size limit…

    Listed under May 2026 on Microsoft Learn

1. New feature

   Upcoming Change - Migrate from Microsoft Entra Connect Sync to Microsoft Entra Cloud Sync

   Type: Plan for change Service category: Entra Connect Product capability: Entra Connect As organizations look to strengthen identity security and advance their Zero Trust strategies, many are looking for simpler, more reliable ways to manage hybrid identity. To support these…

   DocsWhat is Microsoft Entra Cloud Sync?New·Migrate to Microsoft Entra Cloud SyncNew·Tutorial - Migrate to Microsoft Entra Cloud Sync for a Synced Active …New·Microsoft Entra Cloud Sync migration decision guideNew

   What is Microsoft Entra Cloud Sync? Learn how Microsoft Entra Cloud Sync synchronizes users, groups, and contacts from Active Directory to Microsoft Entra ID, and how enabled device sync supports hybrid join.

   Listed under April 2026 on Microsoft Learn Action may be required
2. Preview

   Public Preview - Microsoft Entra ID federation with External ID (EEID)

   Type: Public Preview Service category: B2C - Consumer Identity Management Product capability: 3rd Party Integration Microsoft Entra ID federation with External ID (EEID) enables organizations to let users sign in to customer‑facing applications using their existing workforce Entra ID identities…

   DocsAdd Microsoft Entra ID for customer sign-inNew

   Add Microsoft Entra ID for customer sign-in Learn how to configure a Microsoft Entra ID tenant as an OpenID Connect identity provider in Microsoft Entra External ID, enabling users to sign in using their existing organizational accounts.

   Listed under April 2026 on Microsoft Learn
3. Preview

   Public Preview - App-based branding via Branding themes in Microsoft Entra tenants

   Type: Public Preview Service category: User Experience and Management Product capability: User Authentication In Microsoft Entra tenants, customers can create a single, tenant-wide, customized branding experience that applies to all apps. We are introducing a concept of Branding "themes" to…

   Listed under April 2026 on Microsoft Learn
4. Preview

   Public Preview - Account Discovery

   Type: Public Preview Service category: Provisioning Product capability: 3rd Party Integration Microsoft Entra ID Governance now supports account discovery for connected applications in public preview. This capability provides administrators with visibility into all accounts that exist within connected applications, including…

   Docshttps://aka.ms/accountDiscoveryDocumentation

   Listed under April 2026 on Microsoft Learn
5. Preview

   Public Preview - $count filtering in sign-ins API

   Type: Public Preview Service category: MS Graph Product capability: Monitoring & Reporting The ability to use $count in sign-ins API requests is now here, allowing customers to perform count computations directly in API requests. For more information, see: Customize Microsoft…

   DocsCustomize Microsoft Graph Responses with Query Parameters

   Customize Microsoft Graph Responses with Query Parameters Discover how to use query parameters with Microsoft Graph APIs to control data retrieval and efficiently customize API responses and improve performance.

   Listed under April 2026 on Microsoft Learn
6. New feature

   Plan for change - Update SCIM provisioning applications to use modern authentication

   Type: Plan for change Service category: Provisioning Product capability: Outbound to SaaS Applications What is changing. SCIM provisioning applications that use the OAuth 2.0 Authorization Code grant will be updated to support modern authentication methods, such as OAuth 2.0 Client…

   Listed under April 2026 on Microsoft Learn Action may be required
7. New feature

   Plan for change - Switch from basic auth to workload identity based auth for SAP SuccessFactors provisioning integrations

   Type: Plan for change Service category: Provisioning Product capability: Inbound to Entra ID Microsoft Entra is introducing workload identity–based authentication for SAP SuccessFactors provisioning. This new capability allows the Microsoft Entra provisioning service to authenticate to SAP SuccessFactors using Entra…

   DocsConfigure SuccessFactors inbound provisioning in AD and Microsoft …·Configure SuccessFactors inbound provisioning in Microsoft Entra ID·Configure SAP SuccessFactors writeback in Microsoft Entra ID

   Configure SuccessFactors inbound provisioning in AD and Microsoft Entra ID Learn how to configure inbound provisioning from SuccessFactors

   Listed under April 2026 on Microsoft Learn Action may be required
8. GA

   General Availability – Enabling Social Identity Providers in Entra External ID Native Authentication via browser‑delegated (web‑view) flows using SDKs for applications

   Type: General Availability Service category: B2C - Consumer Identity Management Product capability: Developer Experience Build secure sign‑in and sign‑up experiences for applications in Entra External ID using Native Authentication, with Social Identity Provider support such as Google, Facebook, and Apple…

   DocsNative authentication

   Native authentication Learn how to set up native authentication in Microsoft Entra External ID. Customize the user interface for mobile and desktop apps, and provide a seamless sign-in experience.

   Listed under April 2026 on Microsoft Learn
9. GA

   General Availability - Prefetch Workday termination data to customize account disable logic

   Type: General Availability Service category: Provisioning Product capability: Inbound to Entra ID This Workday connector update resolves termination processing delays observed for workers in APAC and ANZ regions. Admins can now enable termination lookahead setting to prefetch data and tailor…

   Docshttps://aka.ms/WorkdayTerminationLookaheadDoc

   Listed under April 2026 on Microsoft Learn
10. GA

    General Availability - Network Content Filtering based on File Types

    Type: General Availability Service category: Internet Access Product capability: Network Access Global Secure Access supports network-based content filtering based on file types. This allows you to monitor and control file transfers across the network to GenAI and SaaS apps to…

    DocsCreate content policies for network content filtering - Global Secure …Updated

    Create content policies for network content filtering - Global Secure Access Discover how to configure network content filtering with Global Secure Access to enforce data protection policies for files and text content in real time.

    Listed under April 2026 on Microsoft Learn
11. GA

    General Availability - Microsoft Identity Manager (MIM) 2016 Service Pack 3 (SP3)

    Type: General Availability Service category: Microsoft Identity Manager Product capability: Identity Governance Microsoft Identity Manager (MIM) 2016 Service Pack 3 (SP3) is now available. SP3 focuses on stability and supportability, modernizes compatibility with current platform components (SQL Server, SharePoint, and…

    DocsMicrosoft Identity Manager licensing and downloadsUpdated·Upgrade Microsoft Identity Manager 2016 From Service Pack 2 to Service …Updated

    Microsoft Identity Manager licensing and downloads This article outlines the approaches for licensing Microsoft Identity Manager (MIM) 2016, with pointers on where to download the software.

    Listed under April 2026 on Microsoft Learn
12. GA

    General Availability - Microsoft Entra Certificate-based authentication (CBA) support on iOS and CBA as second factor

    Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Microsoft Entra Certificate-Based Authentication (CBA) is now generally available on iOS. Native iOS sign-ins now avoid unnecessary password and MFA prompts, enabling CBA as a supported second factor and…

    DocsMicrosoft Entra certificate-based authentication on Apple devices

    Microsoft Entra certificate-based authentication on Apple devices Learn about Microsoft Entra certificate-based authentication on Apple devices that run macOS or iOS

    Listed under April 2026 on Microsoft Learn
13. GA

    General Availability - Microsoft Entra Agent ID platform

    Type: General Availability Service category: Other Product capability: Identity Security & Protection The Microsoft Entra Agent ID platform is now generally available. The Agent ID platform provides an identity and authorization framework built specifically for AI agents operating in enterprise…

    DocsWhat is Microsoft Entra Agent ID?

    What is Microsoft Entra Agent ID? Learn about Microsoft Entra Agent ID, the identity and security framework that enables organizations to build, discover, govern, and protect AI agent identities at enterprise scale.

    Listed under April 2026 on Microsoft Learn
14. GA

    General Availability - License Usage

    Type: General Availability Service category: Reporting Product capability: Monitoring & Reporting The License Usage page in the Microsoft Entra admin center helps customers optimize their Entra licenses by providing visibility into feature usage across their tenant. It shows how many…

    DocsMicrosoft Entra license usage insights

    Microsoft Entra license usage insights Learn how to use the license usage insights page in the Microsoft Entra admin center to monitor license usage and entitlements.

    Listed under April 2026 on Microsoft Learn
15. GA

    General Availability - Issuer Hints for Microsoft Entra CBA

    Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Issuer Hints is generally available now and helps improve the sign‑in experience for Entra Certificate‑Based Authentication (CBA) by ensuring users are prompted to select only certificates that are trusted…

    DocsMicrosoft Entra CBA Technical Concepts

    Microsoft Entra CBA Technical Concepts Learn how Microsoft Entra certificate-based authentication (CBA) works and the technical concepts you need to set up and manage CBA.

    Listed under April 2026 on Microsoft Learn
16. GA

    General Availability - GSA iOS client support

    Type: General Availability Service category: iOS client Product capability: Network Access We are excited to announce the general availability of the iOS Global Secure Access (GSA) client. The Global Secure Access client on iOS and iPadOS requires no new agent…

    Listed under April 2026 on Microsoft Learn
17. GA

    General Availability - GSA Cloud Firewall for Remote Networks

    Type: General Availability Service category: Internet Access Product capability: Network Access Customer can use GSA cloud firewall to apply admin configurable, 5-tuple (source IP, destination IP, protocol, source port, destination port) based filtering for all internet traffic acquired from branch…

    DocsConfigure cloud firewall for remote networks - Global Secure AccessUpdated

    Configure cloud firewall for remote networks - Global Secure Access Learn how to configure and use cloud firewall to protect against unauthorized internet access from branch offices using Remote Networks for Internet Access.

    Listed under April 2026 on Microsoft Learn
18. GA

    General Availability - Entra CBA as third option in system-preferred MFA methods

    Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication General Availability - Due to known issues on iOS platform, the Entra certificate-based authentication (CBA) method was not allowed as a second factor on iOS and CBA was moved…

    DocsSystem-preferred authentication in Microsoft Entra IDNew

    System-preferred authentication in Microsoft Entra ID Learn how system-preferred authentication evaluates methods to prompt users with the most secure sign-in option for both first-factor and second-factor authentication.

    Listed under April 2026 on Microsoft Learn
19. GA

    General Availability - Entra CBA Certificate Authority (CA) scoping

    Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Entra CBA Certificate Authority (CA) scoping in Microsoft Entra allows tenant administrators to restrict the use of specific certificate authorities (CAs) to defined user groups. This feature enhances the…

    DocsMicrosoft Entra CBA Technical Concepts

    Microsoft Entra CBA Technical Concepts Learn how Microsoft Entra certificate-based authentication (CBA) works and the technical concepts you need to set up and manage CBA.

    Listed under April 2026 on Microsoft Learn
20. GA

    General Availability - Enforce Conditional Access policies like MFA on every PIM activation

    Type: General Availability Service category: Privileged Identity Management Product capability: Privileged Identity Management Generally available feature for configuring reauthentication with Conditional Access for Microsoft Entra Privileged Identity Management role activation. For more information see: On activation, require Microsoft Entra Conditional…

    DocsConfigure PIM for Groups settings

    Configure PIM for Groups settings Learn how to configure PIM for Groups settings.

    Listed under April 2026 on Microsoft Learn
21. GA

    General Availability - Configurable Token Lifetime Policies

    Type: General Availability Service category: Authentications (Logins) Product capability: Platform Configurable token lifetime policies are now generally available in Microsoft Entra ID. This feature allows administrators to customize the lifetimes of access tokens, ID tokens, and SAML tokens issued by…

    DocsConfigurable Token Lifetimes

    Configurable Token Lifetimes Learn how to configure token lifetimes for access, SAML, and ID tokens in Microsoft Identity Platform to enhance security.

    Listed under April 2026 on Microsoft Learn
22. GA

    General Availability - As an AP requestor, I can see in My Access who my approver(s) are if the access package owner allows me to

    Type: General Availability Service category: Entitlement Management Product capability: Entitlement Management In May, requestors will be able to see the name and email address of approvers for their pending access package requests directly in the My Access portal will be…

    DocsRequest an access package - entitlement management

    Request an access package - entitlement management Learn how to use the My Access portal to request access to an access package in Microsoft Entra entitlement management.

    Listed under April 2026 on Microsoft Learn

1. Preview

   Public preview - Tenant governance relationships

   Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance This feature allows admins to request and accept tenant governance relationships, which grant admins of the governing tenant access and administrative control over the governed tenant. For more information…

   DocsWhat is Microsoft Entra Tenant Governance?

   What is Microsoft Entra Tenant Governance? Learn about Microsoft Entra Tenant Governance and how it helps organizations discover, manage, and govern tenants across their environment

   Listed under March 2026 on Microsoft Learn
2. Preview

   Public preview - Tenant configuration management administration portal experience

   Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance Now you can use the Entra admin center to administer tenant configuration management capabilities of Entra tenant governance. You can use this experience to: Create and update monitors that…

   DocsConfiguration management in Tenant Governance

   Configuration management in Tenant Governance Learn about configuration management capabilities in Microsoft Entra Tenant Governance, including baselines and drift monitoring

   Listed under March 2026 on Microsoft Learn
3. Preview

   Public preview - Secure add-on tenant creation

   Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance Permissioned users can now create add-on tenants that are owned and governed by their home tenant. Governance is established through tenant governing relationships, granting admins access and control via…

   DocsWhat is Microsoft Entra Tenant Governance?

   What is Microsoft Entra Tenant Governance? Learn about Microsoft Entra Tenant Governance and how it helps organizations discover, manage, and govern tenants across their environment

   Listed under March 2026 on Microsoft Learn
4. Preview

   Public Preview - Related Tenants

   Type: Public Preview Service category: Tenant Governance Product capability: Tenant Governance This feature allows admins to discover related tenants connected to their own by B2B activity or shared billing information. Admins can use this information to request and establish tenant…

   DocsWhat is Microsoft Entra Tenant Governance?

   What is Microsoft Entra Tenant Governance? Learn about Microsoft Entra Tenant Governance and how it helps organizations discover, manage, and govern tenants across their environment

   Listed under March 2026 on Microsoft Learn
5. Preview

   Public Preview - Phased Rollout with the Conditional Access Agent

   Type: Public Preview Service category: Conditional Access Product capability: Identity Security & Protection You can now use the Conditional Access Optimization Agent to safely roll out any report‑only Conditional Access policy in phases. When you initiate the process, the agent…

   DocsConditional Access Optimization Agent phased rollout

   Conditional Access Optimization Agent phased rollout Learn about the phased rollout capability for the Security Copilot for Microsoft Entra optimization agent.

   Listed under March 2026 on Microsoft Learn
6. Preview

   Public Preview - Passkey Adoption Campaigns with the Conditional Access Optimization Agent

   Type: Public Preview Service category: Conditional Access Product capability: Identity Security & Protection The Conditional Access Optimization Agent now supports passkey adoption campaigns in public preview, helping organizations roll out phishing‑resistant authentication in a structured and automated way. With this…

   DocsDeploy passkeys with the Microsoft Entra Conditional Access …

   Deploy passkeys with the Microsoft Entra Conditional Access Optimization Agent Learn how to use the Conditional Access Optimization Agent to safely deploy a passkey program to roll out phishing-resistant authentication methods.

   Listed under March 2026 on Microsoft Learn
7. Preview

   Public Preview - Microsoft Entra passkeys on Windows

   Type: Public Preview Service category: Authentications (Logins) Product capability: User Authentication Microsoft Entra passkeys on Windows are now available in public preview. This feature allows users to register device‑bound passkeys directly in the local Windows Hello container and use them…

   DocsHow to enable passkeys (FIDO2) in Microsoft Entra ID

   How to enable passkeys (FIDO2) in Microsoft Entra ID Learn how to enable passkeys (FIDO2) in Microsoft Entra ID.

   Listed under March 2026 on Microsoft Learn
8. GA

   Public Preview - Microsoft Entra Backup and Recovery is now available

   Type: Public Preview Service category: Entra Backup and Recovery Product capability: Entra Backup and Recovery Microsoft Entra Backup and Recovery is a built-in solution to help restore your tenant after accidental changes or malicious updates. Always on by default, it…

   DocsMicrosoft Entra Backup and Recovery overviewUpdated

   Microsoft Entra Backup and Recovery overview Learn how Microsoft Entra Backup and Recovery helps you recover from malicious attacks or accidental changes to tenant objects

   Listed under March 2026 on Microsoft Learn Roadmap 567885Related post
9. Preview

   Public Preview - Entra Hybrid Join using Entra Kerberos

   Type: Public Preview Service category: Device Registration and Management Product capability: Device Lifecycle Management This new capability enables a Windows device to become Hybrid Entra joined immediately at provisioning time , without waiting for Entra Connect sync or requiring AD…

   DocsMicrosoft Entra hybrid join using Microsoft Entra Kerberos (preview)Updated

   Microsoft Entra hybrid join using Microsoft Entra Kerberos (preview) Explains prerequisites and steps to set up Microsoft Entra hybrid join by using Microsoft Entra Kerberos.

   Listed under March 2026 on Microsoft Learn
10. Preview

    Public Preview - Cross-tenant security group synchronization

    Type: Public Preview Service category: Provisioning Product capability: Collaboration We’re introducing cross-tenant group synchronization, a new capability that allows organizations to synchronize security groups across Microsoft Entra tenants. This feature enables centralized management of group membership in a source tenant…

    DocsWhat is cross-tenant synchronization in Microsoft Entra ID?New

    What is cross-tenant synchronization in Microsoft Entra ID? Learn about cross-tenant synchronization in Microsoft Entra ID.

    Listed under March 2026 on Microsoft Learn Roadmap 518221
11. New feature

    Plan for change – Agent Registry consolidation into Microsoft Agent 365

    Type: Plan for change Service category: Other Product capability: Directory We’re consolidating agent management experiences to make it easier to observe, govern, and secure all agents in your tenant. Agent 365 will be the single source of truth, offering a…

    DocsEntra admin center·All agents view within the Microsoft 365 admin center (MAC)·agentRegistry resource type·Agent Registry convergence with Microsoft Agent 365

    agentRegistry resource type Represents the Microsoft Entra Agent Registry, which serves as a centralized repository for managing AI agents within an organization. The agent registry allows administrators to register, organize, and manage AI agents and their capabilities, including agent identities, agent users, and…

    Listed under March 2026 on Microsoft Learn Action may be required
12. GA

    General Availability – Improved readability for Authentication Methods Policy Update audit logs

    Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Starting in April 2026, the Authentication Methods Policy Update and Authentication Methods Policy Reset audit log activities has been updated to improve readability and clarity. Previously, audit logs included…

    DocsMicrosoft Entra audit log activity reference

    Microsoft Entra audit log activity reference Get an overview of the audit activities that can be logged in your audit logs in Microsoft Entra ID.

    Listed under March 2026 on Microsoft Learn
13. GA

    General Availability - Tenant configuration management APIs

    Type: General Availability Service category: Tenant Governance Product capability: Tenant Governance Tenant Configuration Management APIs allow organizations to take snapshots of their tenants' current configuration settings in a JSON format and to enforce configuration settings by offering continuous monitoring of…

    DocsOverview of the Tenant Configuration Management APIs in Microsoft …

    Overview of the Tenant Configuration Management APIs in Microsoft Graph Use the Tenant Configuration Management APIs in Microsoft Graph to control and manage configuration settings for an entire organization.

    Listed under March 2026 on Microsoft Learn
14. GA

    General Availability - Synced passkeys in Microsoft Entra ID

    Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Microsoft Entra ID now supports synced passkeys as a generally available authentication method. Synced passkeys are FIDO2-based credentials that can be stored in built-in or third-party passkey providers and…

    DocsHow to enable passkeys (FIDO2) in Microsoft Entra ID

    How to enable passkeys (FIDO2) in Microsoft Entra ID Learn how to enable passkeys (FIDO2) in Microsoft Entra ID.

    Listed under March 2026 on Microsoft Learn
15. GA

    General Availability - SCIM 2.0 APIs for Microsoft Entra ID

    Type: General Availability Service category: Provisioning Product capability: Identity Lifecycle Management SCIM 2.0 APIs give customers, developers, and partners a standards-based option for managing users and groups in Microsoft Entra using the System for Cross-domain Identity Management (SCIM) 2.0 specification…

    DocsEnable Microsoft Entra SCIM 2.0 APIs

    Listed under March 2026 on Microsoft Learn
16. GA

    General Availability - Passkey profiles in Microsoft Entra ID

    Type: General Availability Service category: Authentications (Logins) Product capability: User Authentication Passkey profiles in Microsoft Entra ID are now generally available. Passkey profiles provide a structured way to manage passkey (FIDO2) authentication by allowing administrators to define multiple profiles with…

    DocsHow to enable passkeys (FIDO2) in Microsoft Entra ID

    How to enable passkeys (FIDO2) in Microsoft Entra ID Learn how to enable passkeys (FIDO2) in Microsoft Entra ID.

    Listed under March 2026 on Microsoft Learn
17. GA

    General Availability - New M365 group creation experience in My Groups

    Type: General Availability Service category: Group Management Product capability: End User Experiences We’re improving the Microsoft 365 group creation experience in My Groups to give group owners more control and clarity from the start. The updated experience lets you configure…

    DocsMy Groups

    Listed under March 2026 on Microsoft Learn
18. GA

    General Availability - Microsoft Single Sign-On for Linux support for authenticating with Phish-Resistant MFA credentials

    Type: General Availability Service category: Authentications (Logins) Product capability: SSO The major improvements that this release provides includes: Enables authentication using CBA/YubiKey with certificate (PRMFA) Removes dependency on Java runtime as part of the Intune install Improved performance and reliability…

    DocsMicrosoft single sign-on for Linux

    Microsoft single sign-on for Linux Overview of Microsoft single sign-on for Linux that enables Microsoft Entra ID integration and seamless authentication.

    Listed under March 2026 on Microsoft Learn
19. GA

    General Availability - Microsoft Entra Connect Health now enforces TLS 1.2

    Type: General Availability Service category: Entra Connect Product capability: Entra Connect We’ve completed a full migration to TLS 1.2 for Entra Connect Health and removed legacy TLS 1.1 references as part of security hardening. Ensure your Health agents are up…

    DocsEnable TLS 1.2 support as Microsoft Entra TLS 1.0/1.1 is deprecated

    Enable TLS 1.2 support as Microsoft Entra TLS 1.0/1.1 is deprecated Learn how to enable TLS 1.2 support in your environment before Microsoft Entra discontinues TLS 1.0 and 1.1. Get step-by-step guidance to ensure secure connections.

    Listed under March 2026 on Microsoft Learn
20. GA

    General Availability - Just‑in‑Time Password Migration in Microsoft Entra External ID

    Type: General Availability Service category: B2C - Consumer Identity Management Product capability: B2B/B2C Just‑in‑Time Password Migration is now generally available in Microsoft Entra External ID. Customers can migrate user passwords securely at first sign‑in, allowing users to continue using their…

    Listed under March 2026 on Microsoft Learn
21. GA

    General Availability - Enabling Email and SMS OTP MFA in Entra External ID Native Authentication

    Type: General Availability Service category: B2C - Consumer Identity Management Product capability: Developer Experience Build secure sign‑in and sign‑up experiences for applications in Entra External ID using Native Authentication, with Email and SMS OTP MFA available through developer‑friendly SDKs and…

    DocsNative authentication

    Native authentication Learn how to set up native authentication in Microsoft Entra External ID. Customize the user interface for mobile and desktop apps, and provide a seamless sign-in experience.

    Listed under March 2026 on Microsoft Learn

1. New feature

   Upcoming change – Microsoft Entra Connect security update to block hard match for users with Microsoft Entra roles

   Type: Plan for change Service category: Entra Connect Product capability: Entra Connect What is Hard-matching in Microsoft Entra Connect Sync and Cloud Sync? When Microsoft Entra Connect or Cloud Sync adds new objects from Active Directory, the Microsoft Entra ID…

   DocsMicrosoft Entra Built-in RolesUpdated·Microsoft Entra Connect: Design concepts·Configure Microsoft Entra Connect for an existing tenant·Microsoft Entra Connect: Troubleshoot errors during synchronization

   Microsoft Entra Built-in Roles Learn what each Microsoft Entra built-in role can do, from Global Administrator to Reports Reader. Find role descriptions, permissions, and template IDs.

   Listed under February 2026 on Microsoft Learn Action may be required
2. New feature

   Upcoming Changes – Jailbreak/root Detection in Authenticator App

   Type: New feature Service category: Microsoft Authenticator App Product capability: Identity Security & Protection Starting February 2026, Microsoft Authenticator will introduce jailbreak/root detection for Microsoft Entra credentials in the Authenticator app. The rollout progresses from warning mode → blocking mode…

   Listed under February 2026 on Microsoft Learn Action may be required
3. Preview

   Public Preview - New end user homepage in My Account

   Type: New feature Service category: My Profile/Account Product capability: End User Experiences The homepage at https://myaccount.microsoft.com has been updated to provide a more task-focused experience. Users will see pending actions like renewing expiring groups, approving access package requests, and setting…

   Listed under February 2026 on Microsoft Learn
4. Preview

   Public Preview - BYOD support for Windows client using Microsoft Entra registration

   Type: New feature Service category: BYOD support Product capability: Network Access Bring Your Own Device (BYOD) support for Windows using Microsoft Entra‑registered devices is now available in public preview. Users and partners can access corporate resources from their own devices…

   DocsLearn about bring your own device (BYOD) with the Global Secure Access …

   Learn about bring your own device (BYOD) with the Global Secure Access clients for Microsoft Entra Private Access and Microsoft Entra Internet Access - Global Secure Access Learn about bring your own device (BYOD) with the Global Secure Access clients for Microsoft Entra Private Access and Microsoft Entra Internet Access.

   Listed under February 2026 on Microsoft Learn
5. GA

   General Availability - Sign-in with username/alias

   Type: New feature Service category: B2C - Consumer Identity Management Product capability: B2B/B2C In Microsoft Entra External ID (EEID), users who authenticate with a local email and password now can also sign in using a username (alias) as an alternate…

   DocsSign in with alias

   Sign in with alias Learn how to sign in and sign up with alias/username with External ID for customer identity and access management (CIAM). Get detailed steps to enable username as a sign-in identifier and create users with both email address and username.

   Listed under February 2026 on Microsoft Learn
6. GA

   General Availability - Revoke previously approved access package assignments in My Access

   Type: New feature Service category: Entitlement Management Product capability: Identity Governance By end of March Microsoft Entra ID Governance approvers can now revoke access to an access package after an approval has already been granted. This gives approvers greater control…

   DocsApprove or deny access requests - entitlement management

   Approve or deny access requests - entitlement management Learn how to use the My Access portal to approve or deny requests to an access package in Microsoft Entra entitlement management.

   Listed under February 2026 on Microsoft Learn
7. GA

   General Availability - Microsoft Entra Provisioning Service available in Microsoft Azure operated by 21Vianet

   Type: New feature Service category: Provisioning Product capability: Outbound to SaaS Applications The Microsoft Entra provisioning service can be used in the 21Vianet / China cloud for the following scenarios: API-driven provisioning, Cloud Sync, Cross-tenant sync between China tenants, SCIM…

   DocsKnown issues for provisioning in Microsoft Entra ID

   Known issues for provisioning in Microsoft Entra ID Learn about known issues when you work with automated application provisioning or cross-tenant synchronization in Microsoft Entra ID.

   Listed under February 2026 on Microsoft Learn
8. GA

   General Availability - Microsoft Entra Connect Sync now supports Windows Server 2025

   Type: New feature Service category: Entra Connect Product capability: Entra Connect Microsoft Entra Connect Sync now officially supports Windows Server 2025 . This means you can confidently install and run Microsoft Entra Connect Sync on servers running Windows Server 2025…

   DocsMicrosoft Entra Connect: Version release historyNew·Common hybrid scenarios with Microsoft Entra IDNew·Windows Server 2025·Microsoft Entra Connect

   Microsoft Entra Connect: Version release history This article lists all releases of Microsoft Entra Connect and Azure AD Sync.

   Listed under February 2026 on Microsoft Learn
9. GA

   General Availability - External MFA is Generally Available

   Type: New feature Service category: MFA Product capability: User Authentication We're excited to announce that external authentication methods in Microsoft Entra ID is now generally available under a new name: External Multifactor Authentication (External MFA). This capability enables organizations to…

   DocsHow to manage external MFA in Microsoft Entra ID

   How to manage external MFA in Microsoft Entra ID Learn how to manage external MFA methods for Microsoft Entra multifactor authentication

   Listed under February 2026 on Microsoft Learn
10. GA

    General Availability - Expanded attribute support in Lifecycle Workflows attribute changes trigger

    Type: New feature Service category: Lifecycle Workflows Product capability: Identity Governance The Attribute Changes trigger in Lifecycle Workflows now supports additional attribute types, enabling broader detection of organizational changes. Previously, this trigger was limited to a set of core attributes…

    DocsUse custom attribute triggers in lifecycle workflows

    Use custom attribute triggers in lifecycle workflows This article discusses how to use Custom Attribute Triggers as an attribute change trigger within a workflow in Lifecycle Workflows.

    Listed under February 2026 on Microsoft Learn
11. GA

    General Availability - Device authorization grant flow in Microsoft Entra External ID

    Type: New feature Service category: B2C - Consumer Identity Management Product capability: B2B/B2C Similar to Microsoft Entra ID (workforce tenants), Microsoft Entra External ID (external tenants) now supports device authorization grant flow, which allows users to sign in to input-constrained…

    DocsOAuth 2.0 device authorization grant

    OAuth 2.0 device authorization grant Sign in users without a browser. Build embedded and browser-less authentication flows using the device authorization grant.

    Listed under February 2026 on Microsoft Learn
12. GA

    General Availability - Delegated Workflow Management in Lifecycle Workflows

    Type: New feature Service category: Lifecycle Workflows Product capability: Identity Governance Lifecycle workflows can now be managed with Administrative Units (AUs), enabling organizations to segment workflows and delegate administration to specific admins. This enhancement ensures that only authorized admins can…

    DocsDelegated Workflow Management

    Delegated Workflow Management This article informs a user about delegating management of workflows using Lifecycle workflows.

    Listed under February 2026 on Microsoft Learn
13. GA

    General Availability - Custom banned password lists supported in Microsoft Entra External ID

    Type: New feature Service category: B2C - Consumer Identity Management Product capability: B2B/B2C In addition to the global banned password lists already supported, EEID admins can now add specific strings to block during password creation and reset. For more information…

    DocsPassword protection in Microsoft Entra ID

    Password protection in Microsoft Entra ID Learn how to dynamically ban weak passwords from your environment with Microsoft Entra Password Protection

    Listed under February 2026 on Microsoft Learn
14. GA

    General Availability - Custom Block pages

    Type: New feature Service category: Internet Access Product capability: Network Access When you configure policies blocking your users from accessing a risky, NSFW, or unsanctioned sites or apps in GSA, they receive a clear HTML error message with Microsoft Entra…

    DocsHow to Customize Global Secure Access Block Page - Global Secure …

    How to Customize Global Secure Access Block Page - Global Secure Access Use custom block pages to display organization-specific messaging internet access policies block users from accessing websites.

    Listed under February 2026 on Microsoft Learn

1. GA

   General Availability - Session Control Conditional Access Policies in Entra External ID

   Type: New feature Service category: Conditional Access Product capability: B2B/B2C EEID admins can configure persistent browser session and sign‑in frequency in Conditional Access. For more information, see Conditional Access: Manage Session Controls Effectively .

   DocsConditional Access: Manage Session Controls Effectively

   Conditional Access: Manage Session Controls Effectively Learn how session controls in Microsoft Entra Conditional Access policies enable secure, limited experiences for cloud apps based on device compliance.

   Listed under January 2026 on Microsoft Learn
2. GA

   General Availability - Service Principal creation audit logs for alerting & monitoring

   Type: New feature Service category: Audit Product capability: Monitoring & Reporting New audit log properties now make it easy for admins to understand why a service principal was created and who or what triggered it. The logs now surface the…

   DocsUnderstand why a service principal was created in your tenant·How to analyze the Microsoft Entra provisioning logs

   Understand why a service principal was created in your tenant Learn why a Microsoft Entra service principal was created in your tenant and who or what triggered the event through new properties that have been added audit log activity.

   Listed under January 2026 on Microsoft Learn
3. GA

   General Availability - Microsoft Entra ID Governance guest billing meter enforcement

   Type: New feature Service category: Entitlement Management, Lifecycle Workflows Product capability: Entitlement Management, Lifecycle Workflows Enforcement for the Microsoft Entra ID Governance guest billing meter is now in effect for Entitlement Management and Lifecycle Workflows (Access Reviews will be enforced…

   DocsMicrosoft Entra ID Governance licensing for guest usersNew

   Microsoft Entra ID Governance licensing for guest users Learn how Microsoft Entra ID is licensed for guest users.

   Listed under January 2026 on Microsoft Learn
4. GA

   General Availability - Improved enforcement for All resources policies with resource exclusions

   Type: Changed feature Service category: Conditional Access Product capability: Access Control Microsoft Entra Conditional Access is strengthening how policies that target All resources with resource exclusions are enforced in a narrow set of authentication flows. After this change, in user…

   DocsScopes and permissions in the Microsoft identity platformUpdated·Targeting Resources in Conditional Access Policies

   Scopes and permissions in the Microsoft identity platform Learn about openID connect scopes and permissions in the Microsoft identity platform endpoint.

   Listed under January 2026 on Microsoft Learn
5. GA

   General Availability - Entra Private Access for Domain Controllers

   Type: New feature Service category: Private Access Product capability: Network Access Bring MFA to on‑premises applications when accessed from on‑premises, i.e., local‑to‑local access, while safeguarding domain controllers against identity threats. Enable secure access to private apps that use domain controllers…

   DocsConfigure Microsoft Entra Private Access for Active Directory Domain …

   Configure Microsoft Entra Private Access for Active Directory Domain Controllers - Global Secure Access Enforce Conditional Access and multifactor authentication for Kerberos authentication to Active Directory Domain Controllers through Microsoft Entra Private Access.

   Listed under January 2026 on Microsoft Learn
6. GA

   General Availability - Client Credentials in Microsoft Entra External ID

   Type: New feature Service category: B2C - Consumer Identity Management Product capability: B2B/B2C We are pleased to announce the general availability of client credentials in Entra External ID. The OAuth 2.0 client credentials grant flow permits a web service (confidential…

   DocsM2M Premium add‑on·OAuth 2.0 client credentials flow on the Microsoft identity platform

   OAuth 2.0 client credentials flow on the Microsoft identity platform Build web applications by using the Microsoft identity platform implementation of the OAuth 2.0 authentication protocol.

   Listed under January 2026 on Microsoft Learn
7. GA

   General Availability - App-based branding via Branding themes in Entra External ID

   Type: New feature Service category: B2C - Consumer Identity Management Product capability: B2B/B2C In Entra External ID (EEID), customers can create a single, tenant-wide, customized branding experience that applies to all apps. We're introducing a concept of Branding "themes" to…

   DocsCustomize the sign-in experience for your application with branding …

   Customize the sign-in experience for your application with branding themes Learn how to create branding themes and apply them to the sign-in experience for your application in Microsoft Entra ID.

   Listed under January 2026 on Microsoft Learn
8. GA

   General Availability - Ability to convert Source of Authority of synced on-premises AD users to cloud users is now available

   Type: New feature Service category: User Management Product capability: Microsoft Entra Cloud Sync We’re pleased to announce the general availability of object-level Source of Authority (SOA) switching for Microsoft Entra ID. With this feature, administrators can transition individual users from…

   DocsTransfer user SOA to Microsoft Entra IDUpdated

   Transfer user SOA to Microsoft Entra ID Learn how to transfer user Source of Authority (SOA) to Microsoft Entra ID, minimize your AD DS footprint, and govern the full user lifecycle from the cloud.

   Listed under January 2026 on Microsoft Learn

No changes match.