Entra 🆔 News #141 → This week in Microsoft Entra
Learn about new Microsoft Entra features including Backup and Recovery, Tenant Governance and cross tenant group sync.
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
With the RSA Conference around the corner, we’ve had some major Entra-related announcements this week.
The biggest new features just announced are the Microsoft Entra Backup and Recovery service and the Entra Tenant Governance feature.
Microsoft also introduced a new AI pillar in their Zero Trust Workshop, along two new (Data and Networking) pillar additions to the Zero Trust Assessment. This now includes a range of automated tests to verify your Entra Private Access and Internet Access configurations.
Don’t forget to add this week’s Entra Chat podcast to your queue. Darren has plenty of tricks up his sleeve when it comes to Entra Provisioning Services, making this a great opportunity to learn from a true expert.
Enjoy!
⚡️ Microsoft
🔥 Public Preview
New tools and guidance: Announcing Zero Trust for AI • Mike Adams
Microsoft Entra Backup and Recovery • Microsoft Learn
Microsoft Entra Tenant Governance • Microsoft Learn
Microsoft Entra cross-tenant group synchronization • Microsoft Learn
📖 Read
When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures • Microsoft Threat Intelligence, Microsoft Defender Security Research Team
Secure access in the age of AI: Key findings from our 2026 Report • Kaitlin Murphy
Microsoft Entra innovations announced at RSAC 2026 • Irina Nechaeva
🗣️ Message Center
MC1223829 - Upcoming Conditional Access change: Improved enforcement for policies with resource exclusions (Updated 18 Mar)
MC1247893 - Microsoft Entra passkeys on Windows now support phishing-resistant sign-in (Updated 18 Mar)
MC1253746 - Microsoft Entra: Passkeys in Microsoft registration campaigns (Updated 18 Mar)
MC1246002 - Prevent/Fix: Microsoft Baseline Security Mode has automatically trigger Entra Conditional Access policy creation (Updated 18 Mar)
From the community…
🚀 Most popular posts from last week
🥇Conditional Access: Finding the Gaps in Your Entra CA Before Attackers Do! • Jon Hope
🥈Microsoft Entra Passkeys on Windows now Support Phishing-Resistant Sign-In • Rudy Mens
🥉New Microsoft Entra Passkeys for Windows Hello Enter Public Preview • Daniel Bradley
Sponsored by:
What’s Slowing Decisions in Your Entra ID Tenant?
In Microsoft Entra ID environments, application sprawl and uncertainty slow decisions, not just visibility. Hundreds of enterprise applications and service principals with persistent OAuth permissions and unclear ownership make it difficult to answer basic questions. Which apps have access to Microsoft 365 data? Is that access still justified? Who owns it?
When those answers are not immediate, reviews take longer, approvals stall, projects slow down, and your team is seen as a blocker rather than a technology enabler.
ENow’s AppGov Score provides a clear view of permission risk, consent practices, and ownership gaps across your tenant. With that visibility, teams can make faster decisions, reduce unnecessary access, and keep work moving without added risk.
☀️ Learn
👩✈️ AI & Copilot
Is the New Agent 365 Worth $99? • Paul Robichaux
Microsoft Orphaned Agents Identities: The hidden identity debt in your Entra tenant • Raymond Roethof
Secure access for AI agents, the new frontier of identity (25 min) • Leandro Iwase, Nick Wryter
🧰 Workload ID
Securing the Unseen: Why Non-Human Identities Deserve CISO Attention • David Alonso Dominguez
📺 Overview of Entra Workload Identities (3 min) • Orin
👮♂️ ID Governance
How to Implement Multi-Stage Approval for High-Privileged Entra Roles Using Entitlement Management and PIM • Sreejith Reghunathan Pillai
How to Secure Access to Entra Roles with Conditional Access and Privileged Identity Management • Jon Towles
📺 Sign-In Risk vs User Risk - Most Admins Don’t Know the Difference (14 min) • Jonathan Edwards
🛠️ Access Package Documentor – A Reporting Tool for Entra ID Governance • Christian Frohn
🛠️ Entra Provision On Demand PowerShell Module • Darren Robinson
🌐 Private Access & Internet Access (GSA)
Entra Private Access and VPN Migration Strategies on Entra.News • Richard M. Hicks
Your Data Has a Back Door. GSA and Purview Are the Deadbolt • Dustin Gullett
📦 Apps
🛠️ Privileged App Path Auditor - Audit Entra ID for privilege escalation paths through application permissions, role assignments, and app ownership • Nicolas Blank
Authentication
A Beginner’s Deep Dive Guide to Entra Passkeys • Shehan Perera
📺 Adding Allowed FIDO Keys and Registering in Microsoft Entra (4 min) • Mobile Jon
📺 From Lockouts to Logins: Modern Account Recovery and Passkeys (59 min) • Hana Kim, Jai Maharaj
🤖 DevOps & PowerShell
The Sad State of Microsoft Graph and Other APIs • Tony Redmond
🚦 Conditional Access
Conditional Access Optimization Agent knowledge base • Jan Bakker
🖥️ Devices
📺 Azure Bastion Enter ID Authentication: Full Requirements Guide #shorts • Travis Roberts
📺 Samba 4.24 Brings Entra ID Password Reset Support and Kerberos Hardening (2 min) • DistroTester
📺 Setting up Conditional Access for Entra Privileged Identity Management (4 min) • Mobile Jon
🏙️ External ID - Guests & Multi-Tenant Organizations
Guest Identity Governance in Microsoft Entra ID - IdefixWiki • Julian Rasmussen
📈 Reporting and Insights
Introducing M365IdentityPosture: Community-Driven Identity Reporting for Microsoft 365 • Sebastian Flæng Markdanner
🥷 Security
Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found • Nyxgeek
🎙️ Episode 126: Microsoft Baseline Security Mode • Michael Howard, Sarah Young
Microsoft Quietly Closes Another Loophole for Tenant Domain Enumeration • Daniel Bradley
When OAuth Redirects Become a Phishing Tool • Matej Klemenčič
📺 SC-900: Microsoft Security, Compliance, and Identity Fundamentals • Microsoft Learn Course Video Series
🛠️ From Enumeration to Findings: The Security Findings Report in EntraFalcon – Compass Security Blog • Christian Feuchter
♻️ Sync
📺 Architecture Explained: Integrating On Prem AD with Microsoft Entra ID (9 min) • Thomas Mitchell
📒 Tenant Configuration
Backup and Recovery for Microsoft Entra • Brian Veldman
Microsoft Entra ID Backup and Recovery: Native Tenant Backup Is Finally Here • Rawson Wade
Microsoft updates the Entra license usage insights blade • Daniel Bradley
Use Entra Tenant Governance for Native Multi-Tenant Drift Detection • Daniel Bradley
📺 Entra Backup & Recovery (Public Preview) (9 min) • RioCloudSync
📺 Tenant Configuration Management Creating a Snapshot (7 min) • TechNik
📺 What’s NEW in Microsoft 365 & Entra ID March 2026 (16 min) • Andy Malone
🛍️ External ID - Customers
Creating a feature flag in Azure AD B2C • Rory Braybrook
Entra External ID (EEID) AADSTS1100001 error with token issuance custom authentication extensions • Rory Braybrook
⚒️ Toolkit
M365IdentityPosture: PowerShell security reporting framework for Microsoft 365 identity posture assessment. Analyzes Authentication Context, PIM, Conditional Access & more. • Sebastian F. Markdanner
👨🏽💻 Merill’s corner
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.