Entra 🆔 News #103 → This week in Microsoft Entra

Read about changes in retention to audit history of access reviews, new Microsoft managed app consent policies, info on retirement of Azure AD Graph and Azure AD PowerShell.

👋 Hi there! Merill and Joshua here, bringing you this week’s global roundup of Microsoft Entra news.

First up, have you checked your Message Center notifications recently? There are some significant Entra-related updates you need to know about, with three major changes on the horizon. A crucial one is about access review historical information: what used to be virtually unlimited will soon be capped at 12 months. If you haven't archived or backed up older reviews, you'll need to act fast – the deadline is August 15.

Here are some other key dates to mark on your calendar:

• Mid-July 2025: Microsoft managed App Consent Policies will be enabled. This means, by default, users will no longer be able to consent to third-party applications accessing their files and sites. For more details, check out this week’s Entra Chat podcast with Erin Grenlee and also check out our sponsor ENow’s AppGov Score.

• September 2025: Apps using Azure AD Graph API will stop working for those who opted for extended access. Be aware that temporary outage tests (8-24 hours) are scheduled between July and September.

• October 2025: The AzureAD and AzureAD-Preview PowerShell modules will be retired and will stop functioning. Expect temporary outage tests (8-24 hours) in September 2025.

---

A Special Request: We have a small favor to ask! Joshua, who co-edits this newsletter, is currently in his first year at RMIT University and is actively looking for a part-time role in IT/Cybersecurity. If you know of any entry-level openings or opportunities that might be a good fit, we'd be thrilled to hear from you. Please email joshua@fdo.net.au or reach out on Joshua's LinkedIn Profile.

Thanks and enjoy this week’s Entra News and podcast!

---

---

Sponsored by:

Discover Entra ID App Risks & Accelerate App Governance

Identify risks in your Entra ID application environment to remediate and reduce security gaps before a threat actor can exploit these vulnerabilities.

ENow’s AppGov Score utility analyzes your tenant and uncovers areas for improvement to strengthen your identity governance posture.

Uncover insights like:
⚠️ Number of high-risk apps
🌐 How many apps use public client flows
🛡️ Accounts with app admin privileges
🚫 Percent of apps lacking admin consent
❓ Apps without assigned owners
🎣 BEC-risky enterprise apps
⏳ Expired or expiring client secrets

---

⚡️ Microsoft

📖 Read

• OAuth consent phishing explained and prevented • Nitika Gupta

• Important Update: Azure AD Graph retirement • Kristopher Bash

• Important Update: AzureAD PowerShell retirement • Kristopher Bash

• Streamline user management across Microsoft clouds • Joseph Dadzie

📺 Watch

• Build Microsoft Entra custom authentication extensions • Yoel Horvitz

🗣️ Message Center

• 26 June - MC1103608 - Microsoft Entra ID: Change in guest authentication experience for B2B collaboration [ 🚩 Major Change]

• 26 June - MC1089315 - Resharing to external users required after enabling Microsoft SharePoint integration with Microsoft Entra B2B [ 🚩 Major Change]

• 23 June - MC1101895 - Microsoft Entra ID access reviews: Updated historical data retention policy for access reviews [ 🚩 Major Change]

• 18 June - MC1097272 - Microsoft 365 Upcoming Secure by Default Settings Changes

• 17 June - MC1097225 - Microsoft Entra ID: Upcoming changes to support passkey profiles in the authentication methods policy (preview)

---

From the community…

🚀 Most popular posts from last week

• 🥇What No One Tells You About Non-Interactive Logs • Sapir Federovsky

• 🥈Automate Compromised Account Remediation in Microsoft 365 • Blesslin Rinu

• 🥉Entra Resiliency - Plans A - E • John Savill

☀️ Learn

👩‍✈️ AI & Copilot

• Integrating Entra ID and AI Agent workflows in Azure Logic Apps • Brian Veldman

📦 Apps

• Practical Graph: Finding Owners for Ownerless Apps from Audit Data • Tony Redmond

🔑 Authentication

• Monitoring Entra Auth Methods • Martin Rothe

• Who Is Still Using Text Messaging For Multi-Factor Authentication • Brian Reid

👥 User & Group Management

• How to Offboard Employee in Microsoft 365 • Ali Tajran

🤖 DevOps & PowerShell

• Microsoft 365 PowerShell Modules Need Better Testing • Tony Redmond

🚦 Conditional Access

• Protecting your Conditional Access Policies: Lean Backup Strategies for Entra ID • Klaus Bierschenk

• Token Protection Extends to Microsoft Graph PowerShell SDK Sessions • Tony Redmond

• Entra ID – Known issue (but undocumented) with conditional access • Benoit Hamet

📈 Reporting and Insights

• Advanced Monitoring of Microsoft Entra ID Break Glass Accounts with Sentinel, Logic Apps, and MDCA (Part 2/2) • Sreejith Reghunathan Pillai

🥷 Security

• Beware the Hidden Risk in Your Entra Environment • Simon Maxwell-Stewart

• nOAuth Abuse Alert: Full Account Takeover of Entra Cross-Tenant SaaS Applications • Eric Woodruff

• Finding Entra ID CA bypasses - the structured way (Slides) • Fabian Bader, Dirk-jan Mollema

• The Ultimate Guide for Protecting Hybrid Identities in Entra ID (Slides) • Nestori Syynimaa

• Bringing your own Identity Provider to Entra ID for Persistence and MFA Bypasses (Slides) • Dirk-jan Mollema

• New Secure by Default Changes in Microsoft 365 • Rudy Mens

♻️ Sync

• Why you should disable Seamless SSO in Microsoft Entra Connect • Daniel Bradley

📒 Tenant Configuration

• From warnings that don’t help to ones that do • Jonas Bøgvad

---

⚒️ Toolkit

• Entra Scopes - Entra ID First Party Apps & Scope Browser - Browse and explore first-party applications including their pre-consented permissions in Microsoft Entra ID • Fabian Bader, Dirk-jan

• EntraPassTheCert - a post-exploitation tool that allows attackers to request Entra ID's user P2P certificate and authenticate to a remote Entra joinned machine with it. • Yuya Chudo

  • Hopping Accross Devices: Expanding Lateral Movement through Pass-the-Certificate Attack (Talk abstract)

• Access Package Builder • Nico Wyss

---

📺 Watch

• How To Make AVD SSO Super Easy For Everyone! • Dean Cefola

• How to disable Self-Service Password Reset for administrators in Entra ID | Cybersecurity World • Cybersecurity World

---

🔥 Maester

• Automatically Generate Maester Tests for Conditional Access • Jasper Baes

• Read blog post for details on all the new features → Maester June 2025 Release

---

🔌 Lokka

• Lokka MCP Authentication Enhancements • Darren Robinson

---

👨🏽‍💻 Merill’s corner

---

• Want to get featured on Entra.News? → Submit your content 😎

• Want us to say nice things about your company? Sponsor entra.news 🤩

• Love the newsletter? Tell us 💚❤️💜

---

---

🪃 Acknowledgement of Country

Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.