Entra 🆔 News #159 → This week in Microsoft Entra

Learn about changes coming to Entra ID CSS branding, External ID Migration Policy Analyzer and more!

👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.

Some key highlights this week. Darren Robinson built an MCP server for Entra.Chat. Point your agent at it and you get every episode and newsletter as searchable context. Worth 5 minutes of your time.

Jan Bakker has been writing some top notch Maester tests using AI, and he wrote up how he does it. Idea to pull request!

Also don’t miss Audrey Long from Xbox on securing 70+ Entra tenants with Maester.

Enjoy!

---

Sponsored by:

88% say AI has outrun their identity stack.

AI agents are already making production API calls, running workflows, and touching sensitive data. Your written policies can’t regulate what a machine does at runtime or prove its actions.

FusionAuth’s 2026 State of AI and Identity Report surveyed over 300 technology leaders on the gap:

• 88% say AI adoption has outrun their identity and security readiness

• The more confident a team is in its AI posture, the more likely it’s had a confirmed incident

• Multi-tenant SaaS identity environments report far higher incident rates than isolated or self-hosted deployments

In an AI world, your deployment model is a security decision. Get the data.

---

⚡️ Microsoft

🏆 General Availability

• What’s New in Microsoft Entra: July 2026 • Martin Coetzer

📖 Read

• Modernize SAP Identity Management with Microsoft Entra • Mark Wahl

• Secure AI, web, and private apps with Zero Trust • Sinead O’Donovan

• Microsoft Entra ID enhances security of branded sign-ins • Adam Steenwyk

• Plan your Azure AD B2C migration with the Migration Policy Analyzer • Namita Singh

🗣️ Message Center

• MC1221452 - (Update)Microsoft Entra ID: General Availability of passkey profiles and migration for existing Passkeys (FIDO2) tenants

• MC1282568 - General Availability: Microsoft Entra passkeys on Windows

• MC1400824 - Microsoft Entra: Self-service password reset CAPTCHA protection updated

• MC1435782 - Microsoft Entra ID: Retirement of custom CSS positioning properties in custom branding

• MC1437671 - Microsoft Entra: Passwordless password change in My Sign-Ins

Credit Ruan Kotzé

---

From the community…

🚀 Most popular posts from last week

• 🥇 Taking Back Control: Managing the New Entra SSO Prompt in Windows via Intune • Per Larsen

• 🥈 Stop Flying Blind, Take Two: A Brand New Entra ID App Report • Matej Klemenčič

• 🥉Don’t Delete the Guest Account: Reset Redemption Status in Microsoft Entra • Sreejith Reghunathan Pillai

---

Sponsored by:

Still spending hours packaging and updating applications for Microsoft Intune?

Pckgr helps IT administrators automate the entire application lifecycle, from packaging and deployment to version updates and compliance.

Key benefits:
• Private repository of ready-to-deploy applications
• Automated update management
• Windows, macOS and Custom application support
• Reduced packaging and maintenance workload
• Vulnerability detection and remediation

Reduce operational overhead, improve consistency, and give your team time back for higher-value work.

---

☀️ Learn

👩‍✈️ AI & Copilot

• The Invisible Factory: Four Security ‘Weaknesses’ in Entra Agent ID Blueprints • Derk van der Woude

• The sad state of governance APIs for Copilot and Agent 365 • Vasil Michev

• Inside Entra Agent ID • Elli Shlomo

🧰 Workload ID

• Two doors into your tenant: delegated vs application permissions in multi‑tenant Entra apps • Derk van der Woude

• Using User Assigned Managed Identities with Microsoft 365 Automation • Tony Redmond

👮‍♂️ ID Governance

• Access Packages On-Demand with PowerShell • Mark Orr

🌐 Private Access & Internet Access (GSA)

• Entra Internet Access TLS Inspection and Always On VPN: Troubleshooting SSTP Connection Failures • Richard Hicks

📦 Apps

• How to add granular amr claims to your SAML apps in Entra ID • Jan Bakker

🫆 Authentication

• Passkeys by default and retirement of Microsoft-provided SMS and voice in Entra ID • Stefan Dohnal

• Microsoft Entra to allow passwordless password changes • Daniel Bradley

• HEADS UP: The 2027 Microsoft MFA Shift Is Coming • Colby Pryor

• 🎙️ Ctrl+Alt+Azure | 352 - So long, SMS and voice authentication • Jussi Roine and Tobias Zimmergren

• 📺 SMS Gets Hacked, FIDO2 Doesn’t: Why Your MFA Isn’t Good Enough • Travis Roberts

• 📺 Stop Using SMS MFA [Before Entra Locks You Out] • Ru Campbell

👥 User & Group Management

• Entra ID – A new administration role for SOC incident response • Benoit HAMET

🤖 DevOps & PowerShell

• Permissions Creep Halts Microsoft Graph PowerShell SDK • Tony Redmond

• How JSON Batching Speeds Up Graph API Processing • Tony Redmond

• 📺 Zero Trust, Five Logins - PSConfEU 2026 • Gael Colas, Friedrich Weinmann and Aleksandar Nikolic

🚦 Conditional Access

• Replace Remember MFA with Conditional Access Sign-in Frequency • Pranavkumar

🖥️ Devices

• Inside Microsoft Intune MAM: What Your Mobile App Protection Actually Protects • Rawson Wade

• Goodbye Passwords: Certificate-Based Authentication on Windows with Cloud PKI in Microsoft Intune • Nicky De Westelinck

• Lock or sign-out when Yubikey is removed from the device • Jan Bakker

• Hybrid Join to Entra Join Migration? Don’t Miss This Microsoft Entra Token Protection Limitation • Sreejith Reghunathan Pillai

🏙️ External ID - Guests & Multi-Tenant Organizations

• Teams Shared Channels: Use Cases, B2B Direct Connect, and Governance • Frank van Zandwijk

🥷 Security

• The New Hotness in Phishing: Device Code Attacks in M365 • Danny Dubree

• 📺 Episode 49 - Common Entra Security Mistakes • Ru Campbell and Dinant Paardenkooper

📒 Tenant Configuration

• Microsoft are retiring custom CSS positioning in company branding • Daniel Bradley

• 📺 Microsoft 365 Important Updates Every Admin Needs to Know • Andy Malone

---

⚒️ Toolkit

• Entra Chat Podcast MCP Server • Darren Robinson

---

🔥 Maester

• Introducing Active Directory Security Testing in Maester 🏰 • Maester Team

• Writing Maester tests using AI - From idea to Pull Request • Jan Bakker

---

👨🏽‍💻 Merill’s corner

---

• Want to get featured on Entra.News? → Submit your content 😎

• Want us to say nice things about your company? Sponsor entra.news 🤩

• Love the newsletter? Tell us 💚❤️💜

---

---

🪃 Acknowledgement of Country

Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.