👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Microsoft just delivered some major features this week: Platform SSO for macOS, Bicep templates and Continuous Access Evaluation in Azure DevOps – all now production-ready. Plus a new Microsoft Graph Terraform provider is in Public Preview.
Dive into these updates and tons of expert community content below. Let's get to it!
BTW Don’t miss out this week’s fascinating Entra Chat podcast episode with Conrad Murray.
Enjoy!
Sponsored by:
Uncover Hidden App Risks Before They Become Breaches
Unmonitored app registrations, outdated enterprise apps, and misaligned Entra tenant settings can quietly expand your attack surface. Over time, these forgotten or over-permissioned apps become prime entry points for attackers.
ENow AppGov Score gives you visibility into your Entra environment. In just minutes, it scans for risky apps and misconfigurations, providing a clear, actionable risk score based on 20+ app governance and security checks.
· Proactive app discovery and shadow IT identification 🔍
· Automated cleanup of unused or over-permissioned apps 🧹
· Avoid cumbersome onboarding/offboarding bottlenecks ⏳
· Prevent app disruption due to credential expiration 🔐
Don’t wait for a breach to identify and close gaps in your application governance. Get your score today and upgrade to the Standard edition for 7 days!
⚡️ Microsoft
🏆 General Availability
Now Generally Available: Platform SSO for macOS with Microsoft Entra ID • Veena Soman
Announcing GA of Bicep templates support for Microsoft Entra ID resources • Dan Kershaw
Real-Time Security with Continuous Access Evaluation (CAE) comes to Azure DevOps • Angel Wong
🔥 Public Preview
📺 Watch
Mastering Risk Analysis with Microsoft Entra ID Protection (10 min) • Winston Howard, Marilee Turscak, Gargi Sinha
From the community…
🚀 Most popular posts from last week
🥇Blocking risky users with Passwordless Authentication methods • Daniel Bradley
🥈Best Practice for Configuring Privileged Identity Management in Microsoft Entra • Daniel Bradley
🥉Protect Copilot with Conditional Access • Jan Mulder
Sponsored by:
EasyEntra: “It Feels Almost Like a Revolution”
Our mission is to simplify hybrid and ☁-only M365 first-line support. 1,000+ customers believe we're on to something – not because they're too stupid to use a mix of ADUC, web consoles, and PowerShell. They just know it's a waste of time.
With EasyEntra, any first-line supporter can manage AD ProxyAddresses, Entra ID MFA settings, and Exchange Online calendar permissions with minimal effort and close to zero training.Get the EasyEntra free trial if you want to:
✅ Cut training time and reduce errors in first-line support.
✅ Resolve tickets faster and boost end-user productivity.
✅ Shield senior IT from escalations.“One of the best products I've used” – Mirick Law, US
“A miracle for our help desk” – Junior Achievement, US
“This is the best software ever” – Core Healthcare, US
☀️ Learn
👩✈️ AI & Copilot
Deploy Microsoft Security Copilot using Azure Bicep • Brian Veldman
💳 Verified ID
Setup Microsoft Entra Verified ID (12 min) • Yoel Horvitz
👮♂️ ID Governance
How to Export PIM Role Assignments in Entra ID • Prajwal Desai
How to find deleted Approvers in Entra ID Governance Access Packages Using PowerShell • Christian Frohn
Microsoft cancels access package visibility changes • Daniel Bradley
🌐 Private Access & Internet Access (GSA)
🔑 Authentication
Entra Authentication Overview • Niklas Tinner
📺 Accelerating Passkey Adoption with Microsoft, Yubico & Silverfort (47 min) • Alex Wilson, Philip Richardson, Merill Fernando
👥 User & Group Management
Practical Graph: Creating Dynamic Microsoft 365 Groups without Entra P1 Licenses • Tony Redmond
The road to cloud-only security groups • Per-Torben Sørensen
🤖 DevOps & PowerShell
📺 How to deal with Microsoft Graph paging using PowerShell (8 min) • Steve Weiner
🚦 Conditional Access
Conditional Access Essentials: Introduction, use cases, the art of possible • Ewelina Paczkowska
🖥️ Devices
From NTLM to Passwordless: How Entra ID & Windows Hello for Business Protect Your Identity • Sreejith Reghunathan Pillai
Passkeys to PRT: The Next Evolution in Authentication • Jonas Bøgvad
Windows Hello PIN Stops Working After the Windows 11 24H2 Upgrade • Rudy Ooms
📈 Reporting and Insights
How to Visualise Microsoft Entra MFA Sign-in Metrics with PowerShell • Daniel Bradley
🥷 Security
Detect threats using GraphAPIAuditEvents - Part 3 • Fabian Bader
17 Effective Ways to Prevent Oversharing in Microsoft 365 • Aima
Entra & Azure Elevated Access Revisited • Sean Metcalf
Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication • Hope Walker
📺 DEFCON33 - Turning Microsoft's Login Page into our Phishing Infrastructure (44 min) • Keanu Nys
📺 The Top 10 Microsoft 365 Roles That Aren’t Global Admin (7 min) • Jonathan Edwards
♻️ Sync
Enable Microsoft Entra ID Group Sync in SCCM • Prajwal Desai
📒 Tenant Configuration
Get started with identities and access using Microsoft Entra • Purav Desai
Clearer View of Direct vs Group-Based License Assignments in M365 Admin Center • Thiraviam
🛍️ External ID - Customers
Some notes on migrating from Azure AD B2C to Entra External ID • Rory Braybrook
📺 Deploy and configure Microsoft Entra External ID! (4 min) • Brian Veldman
🎙️ Podcasts
Integrating SAP HCM with Microsoft Entra ID Governance - SAP on Azure • Chetan Desai, Goran Condric, Holger Bruchelt
The Power of the Graph - RunAs Radio • Tony Redmond, Richard Campbell
👨🏽💻 Merill’s corner
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.
Great Newsletter, thank you a Lot to ready again.