Entra 🆔 News #160 → This week in Microsoft Entra
Learn about device sync coming to Entra Cloud sync, temporary opt-out for automatic passkey registration and more...
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
There’s lots happening with the SMS and MFA retirement and migration to passkeys. Check out the message center posts and docs updates to stay on top of things.
Don’t forget to watch this week’s podcast with Ray Reyes on the new Microsoft Entra and Purview integrations including Conditional Access policies that are based on Microsoft Purview.
Why Entra Admins Need Microsoft Purview Now
Conditional Access no longer begins and ends with identity signals.
Enjoy!
Sponsored by:
Cut the PS: Mailbox Folder Permissions Made Easy
PowerShell is awesome! For automation, bulk-editing, and scheduling. For first-line ad-hoc user support, PowerShell is a resource sinkhole that slows down ticket resolution, sucks in senior IT, and eats up end-user productivity.
To do “simple” mailbox folder permission management using MS standard tooling, your helpdesk needs to juggle five separate cmdlets and hand-type access rights, exact user identities, and SharingPermissionFlags values for calendar delegates.
With EasyEntra, first-line supporters of any level can view and manage mailbox folder permissions in seconds with close to zero training.
And this is just one of many features available in the same application.
“My team and I are blown away with EasyEntra.”
Group IT Manager, RM Curtis, United Kingdom
⚡️ Microsoft
🔥 Public Preview
Configure device sync with Microsoft Entra Cloud Sync (preview) • Microsoft Learn
📖 Read
Assess the SMS and voice migration temporary opt-out: Microsoft is retiring SMS and voice authentication methods in favor of passkeys. Microsoft added the beta Graph opt-out procedure for the automatic passkey and Registration Campaign rollout. Set optOutSettings.passkeyDynamicMigration to true for the temporary 1 September 2026–1 February 2027 exclusion.
Harden GitHub and GitLab federated credentials: Federated credentials that rely on mutable repository, branch, tag, or environment names can be vulnerable to takeover or unintended access. Adopt immutable subject identifiers and review existing workload identity federation configurations.
New tenant-estate architecture series: Seven new articles cover primary tenants, collaborating production tenants, isolated critical-system tenants, business-partner isolation, nonproduction tenants, and hybrid identity.
Global Secure Access publishes dedicated outbound egress IP ranges for allowlisting
SCIM provisioning adds secretless authentication with workload identity federation
What’s new in Microsoft Security: July 2026 • Alym Rayani
🗣️ Message Center
MC1435782 - Microsoft Entra ID: Retirement of custom CSS positioning properties in custom branding
MC1440968 - Microsoft Entra ID: Optimizations for passkey registration experience
Sponsored by:
Recent layoffs have left a lot of strong professionals in limbo.
That’s why we built Sponsor a Seeker — a simple way for the community to lift each other up.
For just $29, you can gift a full 3-month Job-Hunt Pass packed with: • Unlimited resume & job description scans • AI-powered rewrites that actually beat ATS systems • Professional cover letter generation
Every dollar goes directly to the seeker.
You can: → Sponsor someone like Alex M. (recently laid off front-end engineer) → Or request sponsorship for yourself
Either way, you’re helping keep momentum alive in a tough market.
👉 Take action here: pastthebots.com/sponsor
Let’s turn “I was laid off” into “Someone had my back.”
Thank you for being part of this community, Rod Trent Past the Bots
From the community…
🚀 Most popular posts from last week
🥇 Passkeys by default and retirement of Microsoft-provided SMS and voice in Entra ID • Stefan Dohnal
🥈 Lock or sign-out when Yubikey is removed from the device • Jan Bakker
🥉 Inside Microsoft Intune MAM: What Your Mobile App Protection Actually Protects • Rawson Wade
☀️ Learn
🧰 Workload ID
📺 Finding App Permissions in the Entra Maze (a PoShaKucha) • Andres Bohren
📺 Secret’s out 🤫 There’s a better way to access Multi-Tenant • Jonas Sommer Nielsen
📺 Your Graph Apps Are Over-Privileged! (a PoShaKucha) • Morten Mynster
👮♂️ ID Governance
Resetting Escrowed Accounts on a Microsoft Entra Provisioning Job • Darren Robinson
🌐 Private Access & Internet Access (GSA)
Entra ID SMS and Voice MFA Retirement: Migration Playbook • Thomas Marcussen
Global Secure Access in Sentinel, Part 1: Logs Are Not a Strategy • Dustin Gullett
How Entra Private Access Can Stop Hotel Hackers • Colby Pryor
When DNS Lookups Trigger MFA — Private DNS and Conditional Access in GSA • Christopher Brumm
Authentication
📺 MFA Passed, The Attacker Still Won [How To Stop This] • Ru Campbell
📺 Passwordless from Day One | Windows Autopilot + TAP + WHfB + Passkeys (No Password Ever) • Azure Brother
📺 Stop Trusting Your Office IP Address for MFA • Jonathan Edwards
📺 Episode 433: Passkeys, Passwords, and the End of SMS MFA • Microsoft Cloud IT Pro Podcast
👥 User & Group Management
Working with the group insights (analytics) Graph API • Vasil Michev
How to disable group nesting in Microsoft Entra ID • Daniel Bradley
🤖 DevOps & PowerShell
using OData any() to filter proxyAddresses in Graph API • Martin Rublik
🚦 Conditional Access
Conditional Access Visualizer & Deployer Tool • Joey Verlinden
Conditional Access Framework (2026.6.1) • Joey Verlinden
📺 Microsoft Defender for Cloud Apps: Conditional Access App Control Demo | Real-Time Session Control • Rio Hindle
🖥️ Devices
🏙️ External ID - Guests & Multi-Tenant Organizations
Quick look at the sponsorOf property in the Graph API • Vasil Michev
🥷 Security
Microsoft make silent but frequent changes to Entra ID roles • Daniel Bradley
Apply Sensitivity Labels to Microsoft Entra Security Groups • Adi
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts • Bill Toulas
📺 TROOPERS26: I’m_in_your_cloud_v4_FINAL.pdf - hacking everyone’s cloud • Dirk-jan Mollema
♻️ Sync
manipulating proxyAddresses via inbound Entra Connect rules • Martin Rublik
Microsoft Entra Cloud Sync Now Supports Device Sync • Blesslin Rinu
📒 Tenant Configuration
AUs vs RMAUs: What’s That? • Jonathan Hope
Microsoft 365 - Too Complex for Humans to Understand? • Tony Redmond
📺 TROOPERS26: Delete Is Easy – Recovery Is Not: The Reality of Entra ID Backup & Restore • Klaus Bierschenk
🛍️ External ID - Customers
Using social federation via native auth in Entra External ID (EEID) | by Rory Braybrook | The new control plane | Aug, 2026 • Rory Braybrook
🔥 Maester
👨🏽💻 Merill’s corner
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.