👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
It’s been an eventful week, with Agent ID and Agent 365 going GA, bringing lots of new capabilities for Entra administrators, including enhancements to Identity Governance, Internet and Private Access, Agent Registry, now in the Microsoft 365 admin center, and more.
We also released Maester 2.1, and I had fellow core maintainer Sam Erde on the Entra Chat podcast to talk about all the new Maester tests and features.
How to Secure Copilot Agents, Azure DevOps & Defender (+ more) with Maester 2.1 (Full Breakdown)
Maester is back with one of its biggest release since launch. In this episode, we are joined by Sam Erde, Architect at Patriot Consulting and one of Maester’s core maintainers, to walk through everything that’s landed in Maester 2.1.
Enjoy!
Sponsored by:
How Well Do You Know Your Entra Apps?
Microsoft Entra ID environments often contain hundreds, sometimes thousands, of enterprise applications, service principals, and delegated permissions. The challenge is not just managing them, it’s knowing which apps have access to your Microsoft 365 data, whether permissions are excessive, and where governance gaps may exist.
AppGov Score gives you a fast, data-driven assessment of your Entra application governance and security posture. In minutes, you can:
identify risky app permissions
uncover overlooked applications
benchmark your tenant against proven governance best practices.
See where your application governance stands. Try AppGov Score for free today.
⚡️ Microsoft
🏆 General Availability
Microsoft Agent 365, now generally available, expands capabilities and integrations • Nirav Shah, Rob Lefferts, Jason Roszak
What’s New in Agent 365: May 2026 • Alex Pozin, Samer Baroudi
Microsoft 365 E7 and Agent 365 are now generally available • Caroline Stanford
What is Microsoft Entra Agent ID? • Microsoft Learn
Protect agent identities with Microsoft Entra • Microsoft Learn
Authorization in Microsoft Entra Agent ID • Microsoft Learn
Manage agent registry in Microsoft 365 admin center • Microsoft Learn
Governing Agent Identities • Microsoft Learn
Conditional Access for agent identities • Microsoft Learn
Learn about Secure Web And AI Gateway for Microsoft Copilot Studio agents • Microsoft Learn
What is the Microsoft agent identity platform • Microsoft Learn
General Availability: Refresh Token (RT) Transfer to Apple Watch in Microsoft Entra External ID Native Authentication • Sasha Mars
🔥 Public Preview
Lock down AI, web, and private apps: what’s new in Internet Access and Private Access • Sinead O’Donovan
You can’t govern what you can’t see: Closing the identity visibility gap for apps • Joseph Dadzie
Assign Azure Role-based access control (RBAC) Roles - Entitlement management (Preview) • Microsoft Learn
📖 Read
8 best practices for CISOs conducting risk reviews • Rico Mariani
Email threat landscape: Q1 2026 trends and insights • Microsoft Threat Intelligence, Microsoft Defender Security Research Team
🗣️ Message Center
MC1173195 - Microsoft 365 Copilot: Graph APIs for agent and app management
MC1296475 - New dedicated License Requests page in Microsoft 365 Admin Center
RM557187 - Microsoft Edge: Cross Tenant Support using Intune MAM
From the community…
🚀 Most popular posts from last week
🥇Your service principals probably don’t need secrets • Jan Bakker
🥈Don’t Burn the Steak: Entra Passkeys, Shared PCs, and Phishing-Resistant Access • Dustin Gullett
🥉Conditional Access Foundations: The Bottom of the Stack (And Why It Matters Most) • Jon Hope
☀️ Learn
⛑️ ID Protection
🌐 Private Access & Internet Access (GSA)
SASE 101: How to get started with secure access in a cloud-first world • Sule Tatar
What’s New in Entra Global Secure Access Client v2.28.96 • Richard M. Hicks
📦 Apps
Why you should stop using third-party apps with poor authentication • Daniel Bradley
👥 User & Group Management
🤖 DevOps & PowerShell
🛠️ I.D.E.A #003 – One script to register them all! • Per-Torben Sørensen
🚦 Conditional Access
Conditional Access Policy – Named Locations • Keith Doolan
🖥️ Devices
Connect to Microsoft Entra joined device with SSO • Michael Frank
Introducing cross-tenant support for MAM on Windows devices • Peter van der Woude
🏙️ External ID - Guests & Multi-Tenant Organizations
Guest Device Join Type • Jóhannes’
How To Secure Guest User Access & SPO OTP Retirement • Michael Vink
🥷 Security
Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab’s QAZPT Tool • Sébastien Rolland
Identity & Access Management (IAM) Controls – The Stryker Incident • Keith Doolan
Key Microsoft 365 Security Settings to Disable for Better Protection • AIMA
Update to Microsoft SigninLogs • Andrea Fisher
📒 Tenant Configuration
The Missing Link: Entra Backup and Recovery • Shehan Perera
📺 Native Backup for Microsoft Entra is Here (And It Changes the Recovery Game (15 min) • T-Minus365
🛍️ External ID - Customers
Configuring banned passwords in Entra External ID (EEID) • Rory Braybrook
Connecting Entra External ID (EEID) to Entra ID as an external provider via OIDC, not via a Guest Invitation • Rory Braybrook
On Entra External ID (EEID) custom extensions and event listeners — Introduction • Rory Braybrook
⚒️ Toolkit
mjendza/workshop-entra-as-code-interactive - Entra as Code Workshop
Manage your Entra ID tenant using Infrastructure as Code • Mateusz Jendza
🔥 Maester
What’s new in Maester 2.1.0 • Maester Team
Maester ❤️ Multi-Tenant Reports — Microsoft Security Test Automation Framework • Brian Veldman
👨🏽💻 Merill’s corner
📺 Merill’s Game-Changing Browser Extension Just Dropped! (9 min) • Peter Rising
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.