Entra 🆔 News #139 → This week in Microsoft Entra

Learn about External auth methods going GA, SharePoint OTP retirement and more!

👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.

It’s been a busy week in the Entra community — with new GA and Public Preview features, a flurry of Message Center updates, handy community tools, and much more.

Below is a visual snapshot of this week’s highlights.

🎙️ Also, don’t miss this week’s podcast episode with Nathan McNulty and Daniel Bradley, where we dive into the latest features and upcoming changes.

Enjoy!

---

Sponsored by:

Would you bet your reputation on your current Microsoft 365 security posture?

Sure, you’ve checked Purview. Maybe tightened Conditional Access. We all do that.

But it’s usually the quiet stuff that bites... permissions that expanded, policies that drifted, exceptions nobody revisited.

You could assume it’s fine.

Or you could run the Microsoft 365 Security Posture Check.

It’s free.

It runs locally.

And no, it doesn’t send your tenant data back to us.

We’ll even help you set it up.

---

⚡️ Microsoft

🏆 General Availability

• External Auth Methods is Generally Available

• Expanded attribute support in Lifecycle Workflows attribute changes trigger

• Delegated Workflow Management in Lifecycle Workflows

• Upcoming change – Microsoft Entra Connect security update to block hard match for privileged roles

• Jailbreak Detection in Authenticator App

• Microsoft Entra Connect Sync now supports Windows Server 2025

• Revoke previously approved access package assignments in My Access

🔥 Public Preview

• Rethinking “Allow my organization to manage my device” Why opt‑in enrollment works better for Intune • Ramya Sharma

• GSA: BYOD support for Windows client using Microsoft Entra registration

• GSA: Custom Block pages

• New end user homepage in My Account

📖 Read

• OAuth redirection abuse enables phishing and malware delivery • Microsoft Defender Security Research Team

• Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale • Microsoft Threat Intelligence, Microsoft Defender Security Research Team

📺 Watch

• Conditional Access Optimization Agent: What It Is & Why It Matters (39 min) • Microsoft Security Community

🗣️ Message Center

• MC1221452 - Microsoft Entra ID: General Availability of passkey profiles and migration for existing Passkeys (FIDO2) tenants

• MC1243549 - Retirement of SharePoint One-Time Passcode (SPO OTP) and transition to Microsoft Entra B2B

• MC1246002 - Prevent/Fix: Microsoft Baseline Security Mode has automatically trigger Entra Conditional Access policy creation

📆 Upcoming Events

• Join us for the upcoming Dutch Microsoft Entra Community Meetup • Jan Bakker

---

From the community…

🚀 Most popular posts from last week

• 🥇Intune Administrator Is the New Domain Admin • James Robinson

• 🥈Difference Between App Registrations and Enterprise Apps • Dhinesh

• 🥉Passkey onboarding in Entra: What Microsoft doesn’t tell you! • Per-Torben Sørensen

☀️ Learn

👩‍✈️ AI & Copilot

• Testing the msgraph Copilot Skill: Giving AI Agents a Local Graph API Brain • Irwin Strachan

🧰 Workload ID

• Become a Wizard of Entra Workload Identities • Eric Woodruff, Thomas Naunheim

• Managed Identities and How I Use Them • Dennis J.

🌐 Private Access & Internet Access (GSA)

• Microsoft Entra Private Access: Secure Access for External Users to Internal Resources • Oliver Müller

• Update Global Secure Access Client With Intune • Marco Wohler

📦 Apps

• How To Use App Registration Deactivation • Colby Pryor

🫆 Authentication

• March 2026 is here! Synced Passkeys and Passkey Profiles rollout? • Matej Klemenčič

• Microsoft Documentation Says Passkeys in Authenticator Can’t Log Into or Unlock Windows workstations ; But They Can • Dr. Emin Huseynov

• 📺 How To Enable Synced Passkeys In Entra ID • Azure Academy

👥 User & Group Management

• Creating New Entra ID Users the PowerShell Way • Dennis J.

• Microsoft Introduces Group Insights in Entra ID (Preview) • Praba

🤖 DevOps & PowerShell

• How to get better with Graph API – Part one • Jan Bakker

🚦 Conditional Access

• Conditional Access Session Controls Sessions Running Forever • Control Alt Delete Tech Bits

🔐 Credential Management

• The Future of Identity: Self-Service Account Recovery (Preview) in Microsoft Entra • Farooque

🖥️ Devices

• Designing an App Protection Policy that don’t backfire on your unmanaged devices - Just about the Modern Workplace • Joost Gelijsteen

• Disable User Enrolling Personal Windows Devices in Intune • Shehan Perera

• Disabling MDM enrollment when adding work or school account • Peter van der Woude

• Entra ID support for Azure Bastion • Brian Veldman

• Under the Hood: How Brokered Authentication Works on iOS & Android - Intune - In Real Life • Somesh Pathak

• 📺 App Protection Policies: BYOD Done Right in Microsoft 365 (15 min) • Jonathan Edwards

🏙️ External ID - Guests & Multi-Tenant Organizations

• SharePoint Online Drops One Time Passcodes for External Access • Tony Redmond

• Entra B2B Replaces SharePoint One-Time Passcode for External Sharing • Admin Droid

🥷 Security

• There’s a Cable Guy in Your Tenant • Jon Haas

• 🎯 SigninLogs Threat Hunting Workbook Your frontline defense against identity-based attacks in Microsoft Sentinel • David Alonso Dominguez

• Making Global Administrators Safer • Dennis J.

• What is ConsentFix Attack and How to Mitigate it in Microsoft 365 • Kanaga

📒 Tenant Configuration

• New UI to manage allowed tenants for Entra ID integrated applications • Vasil Michev

---

⚒️ Toolkit

• SamErde/DLLPickle: A PowerShell module that helps you get un-stuck from dependency version conflicts that can occur when connecting to multiple Microsoft services in the same session. • Sam Erde

• codeandersen/Group-SOA-Conversion-Tool • Hans Christian Andersen

---

🔥 Maester

---

👨🏽‍💻 Merill’s corner

---

• Want to get featured on Entra.News? → Submit your content 😎

• Want us to say nice things about your company? Sponsor entra.news 🤩

• Love the newsletter? Tell us 💚❤️💜

---

---

🪃 Acknowledgement of Country

Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.