๐ Hi, Merill and Joshua here with this weekโs roundup of the latest news on Microsoft Entra from around the globe ๐.
Itโs been a busy week in the Entra community โ with new GA and Public Preview features, a flurry of Message Center updates, handy community tools, and much more.
Below is a visual snapshot of this weekโs highlights.
๐๏ธ Also, donโt miss this weekโs podcast episode with Nathan McNulty and Daniel Bradley, where we dive into the latest features and upcoming changes.
Passkeys, Conditional Access, Hard-match updates, GSA BYOD: What Entra Admins Need To Know
I am back home in Melbourne today, and joining me are Nathan McNulty from Alaska and Daniel Bradley from the UK as we dive into all the massive Entra updates that dropped last month. We are breaking down the controversial shift to syncable passkeys , why your Conditional Access policies might suddenly start blocking apps , and the absolute necessity of โฆ
Enjoy!
Sponsored by:
Would you bet your reputation on your current Microsoft 365 security posture?
Sure, youโve checked Purview. Maybe tightened Conditional Access. We all do that.
But itโs usually the quiet stuff that bites... permissions that expanded, policies that drifted, exceptions nobody revisited.
You could assume itโs fine.
Or you could run the Microsoft 365 Security Posture Check.
Itโs free.
It runs locally.
And no, it doesnโt send your tenant data back to us.
Weโll even help you set it up.
โก๏ธ Microsoft
๐ General Availability
Expanded attribute support in Lifecycle Workflows attribute changes trigger
Upcoming change โ Microsoft Entra Connect security update to block hard match for privileged roles
Microsoft Entra Connect Sync now supports Windows Server 2025
Revoke previously approved access package assignments in My Access
๐ฅ Public Preview
Rethinking โAllow my organization to manage my deviceโ Why optโin enrollment works better for Intune โข Ramya Sharma
GSA: BYOD support for Windows client using Microsoft Entra registration
๐ Read
OAuth redirection abuse enables phishing and malware delivery โข Microsoft Defender Security Research Team
Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale โข Microsoft Threat Intelligence, Microsoft Defender Security Research Team
๐บ Watch
Conditional Access Optimization Agent: What It Is & Why It Matters (39 min) โข Microsoft Security Community
๐ฃ๏ธ Message Center
๐ Upcoming Events
From the communityโฆ
๐ Most popular posts from last week
๐ฅIntune Administrator Is the New Domain Admin โข James Robinson
๐ฅDifference Between App Registrations and Enterprise Apps โข Dhinesh
๐ฅPasskey onboarding in Entra: What Microsoft doesnโt tell you! โข Per-Torben Sรธrensen
โ๏ธ Learn
๐ฉโโ๏ธ AI & Copilot
Testing the msgraph Copilot Skill: Giving AI Agents a Local Graph API Brain โข Irwin Strachan
๐งฐ Workload ID
Become a Wizard of Entra Workload Identities โข Eric Woodruff, Thomas Naunheim
Managed Identities and How I Use Them โข Dennis J.
๐ Private Access & Internet Access (GSA)
Microsoft Entra Private Access: Secure Access for External Users to Internal Resources โข Oliver Mรผller
Update Global Secure Access Client With Intune โข Marco Wohler
๐ฆ Apps
How To Use App Registration Deactivation โข Colby Pryor
๐ซ Authentication
March 2026 is here! Synced Passkeys and Passkey Profiles rollout? โข Matej Klemenฤiฤ
Microsoft Documentation Says Passkeys in Authenticator Canโt Log Into or Unlock Windows workstations ; But They Can โข Dr. Emin Huseynov
๐บ How To Enable Synced Passkeys In Entra ID โข Azure Academy
๐ฅ User & Group Management
Creating New Entra ID Users the PowerShell Way โข Dennis J.
Microsoft Introduces Group Insights in Entra ID (Preview) โข Praba
๐ค DevOps & PowerShell
How to get better with Graph API โ Part one โข Jan Bakker
๐ฆ Conditional Access
Conditional Access Session Controls Sessions Running Forever โข Control Alt Delete Tech Bits
๐ Credential Management
๐ฅ๏ธ Devices
Designing an App Protection Policy that donโt backfire on your unmanaged devices - Just about the Modern Workplace โข Joost Gelijsteen
Disable User Enrolling Personal Windows Devices in Intune โข Shehan Perera
Disabling MDM enrollment when adding work or school account โข Peter van der Woude
Entra ID support for Azure Bastion โข Brian Veldman
Under the Hood: How Brokered Authentication Works on iOS & Android - Intune - In Real Life โข Somesh Pathak
๐บ App Protection Policies: BYOD Done Right in Microsoft 365 (15 min) โข Jonathan Edwards
๐๏ธ External ID - Guests & Multi-Tenant Organizations
SharePoint Online Drops One Time Passcodes for External Access โข Tony Redmond
Entra B2B Replaces SharePoint One-Time Passcode for External Sharing โข Admin Droid
๐ฅท Security
Thereโs a Cable Guy in Your Tenant โข Jon Haas
๐ฏ SigninLogs Threat Hunting Workbook Your frontline defense against identity-based attacks in Microsoft Sentinel โข David Alonso Dominguez
Making Global Administrators Safer โข Dennis J.
What is ConsentFix Attack and How to Mitigate it in Microsoft 365 โข Kanaga
๐ Tenant Configuration
โ๏ธ Toolkit
codeandersen/Group-SOA-Conversion-Tool โข Hans Christian Andersen
๐ฅ Maester
๐จ๐ฝโ๐ป Merillโs corner
Want to get featured on Entra.News? โ Submit your content ๐
Want us to say nice things about your company? Sponsor entra.news ๐คฉ
Love the newsletter? Tell us ๐โค๏ธ๐
๐ช Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.