Entra 🆔 News #142 → This week in Microsoft Entra

Learn about Tenant Governance, Entra Backup and Recovery, CA Agent updates and more...

👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.

The big news this week is the official launch of Entra Backup and Recovery and Entra Tenant Governance, along with new updates to the CA Optimization Agent.

There’s an upcoming change that may impact applications using Microsoft Graph app-only permissions. Check out the blog post “Designing for Eventual Consistency” for more details.

Don’t forget to catch up on this week’s Entra Chat podcast with Emilien Socchi, where we dig into two of his interesting projects.

Enjoy!

---

Sponsored by:

User Lifecycle: Onboard and Offboard With a Single CmdLet

Fact: Managing hybrid users across AD, Entra ID, and Exchange Online is a breeding ground for missed steps and security gaps - from day one to last day.

EasyEntra’s PowerShell-enabled workflows handle the entire lifecycle:

🚀 Onboard a fully provisioned user in 30 seconds - UI or two-parameter CmdLet.
🚀 Templates defined from existing users in seconds.
🚀 Offboard completely in 10 seconds - UI or single CmdLet.
🚀 Offboarding settings configured once, applied consistently every time.
🚀 Delegate life-cycle management to first-line support - no senior PowerShell skills or tribal knowledge required.

Start your 30-day trial or book a demo - setup takes under a minute - free for tenants with fewer than 25 licensed users.

“It feels almost like a revolution.”
Head of IT, Arjeplog Municipality, Sweden

---

⚡️ Microsoft

🏆 General Availability

• External MFA in Microsoft Entra ID is now Generally Available • Swaroop Krishnamurthy

🔥 Public Preview

• Strengthen Identity Resilience: Recover with Confidence using Microsoft Entra Backup and Recovery • Joseph Dadzie

• Microsoft Entra Tenant Governance: Secure and Manage Multi-Tenant Environments at Scale • Joseph Dadzie

• Evolving Identity Security: How the Conditional Access Optimization Agent Helps You Adapt • Swaroop Krishnamurthy

📖 Read

• Designing for Eventual Consistency for Microsoft Entra • Kyle Marsh

• Identity security is the new pressure point for modern cyberattacks • Rob Lefferts, Nadim Abdo

🗣️ Message Center

• MC1262589 - New M365 group creation and editing in My Groups

• MC1261596 - Notice: Security Copilot will be included as part of your Microsoft 365 E5 plan soon

• MC1260708 - Microsoft Entra ID: Improved readability for Authentication Methods Policy Update audit logs

• MC1248389 - Retirement of -Credential parameter when connecting to Exchange Online PowerShell

---

From the community…

🚀 Most popular posts from last week

• 🥇Microsoft Quietly Closes Another Loophole for Tenant Domain Enumeration • Daniel Bradley

• 🥈The Sad State of Microsoft Graph and Other APIs • Tony Redmond

• 🥉Conditional Access Optimization Agent knowledge base • Jan Bakker

☀️ Learn

👩‍✈️ AI & Copilot

• From Blueprint to Token: How Entra Agent Identity Inheritance Really Works • Derk van der Woude

• Microsoft 365 E7: The Frontier Suite and the Rise of AI Agents • Konstantin Slavin-Borovskij

• Microsoft Entra Agent ID: A Practical Guide to Blueprints and Agent Identities • Raymond Roethof

💳 Verified ID

• Build secure verification with Microsoft Entra Verified ID (14 min) • Yoel Horvitz

⛑️ ID Protection

• Don’t let Entra ID Protection miss your next breach! • Nicola Suter

• 📺 Sign-In Risk vs User Risk - Most Admins Don’t Know the Difference (14 min) • Jonathan Edwards

📦 Apps

• Common Entra ID Security Assessment Findings – Part 1: Foreign Enterprise Applications With Privileged API Permissions • Christian Feuchter

🫆 Authentication

• 🛠️ Entra Auth Tracer – A Browser Extension for Deep Inspection of Microsoft Entra Authentication Flows • Darren Robinson

• The Exchange attribute SOA switch and licencing woes • Morten Skrubbeltrang

🤖 DevOps & PowerShell

• Authentication Tokens Are Not a Data Contract - Azure DevOps Blog • Angel Wong

• Bulk Convert External Users to Internal Users Using PowerShell • Kanaga

• How to Automate Inactive Guest User Removal in Microsoft 365 Using Power Automate • Dhinesh

• Microsoft Limits App Access to Sensitive Message Properties • Tony Redmond

🚦 Conditional Access

• Block Microsoft 365 Apps using Conditional Access Policy • Prajwal Desai

• Conditional Access: CA Analyzer Product Updates • Jon Hope

🖥️ Devices

• KB5085516 OOB Update Resolves Microsoft account sign in Issues • Prajwal Desai

• 📺 Passwordless Windows for BYOD: Entra ID Passkeys Explained (9 min) • Azure Brother

🏙️ External ID - Guests & Multi-Tenant Organizations

• B2B or Not 2B? Cross-Tenant Delegated Administration with Microsoft Entra Tenant Governance • Thomas Naunheim

🥷 Security

• Microsoft Zero Trust Workshop Expands with a Dedicated AI Pillar • Praba

♻️ Sync

• Getting started with Entra Connect Cloud Sync • Pim Jacobs

📒 Tenant Configuration

• Low-Key Debut for Entra ID Backup and Recovery • Tony Redmond

• Microsoft Entra Backup and Recovery • Rudy Mens

• Microsoft Entra ID Gets Native Backup and Recovery — What You Need to Know • Jon Hope

• Tenant governance | Entra ID • Michael Frank

• 🎙️ Unified Tenant Management with Nik Charlebois-Laprade • Nik Charlebois, Richard Campbell

• 📺 Overview of Entra Backup and Recovery (11 min) • John Savill

🛍️ External ID - Customers

• Connecting Entra External ID (EEID) to Entra ID as an external provider via OIDC • Rory Braybrook

---

👨🏽‍💻 Merill’s corner

---

• Want to get featured on Entra.News? → Submit your content 😎

• Want us to say nice things about your company? Sponsor entra.news 🤩

• Love the newsletter? Tell us 💚❤️💜

---

---

🪃 Acknowledgement of Country

Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.