👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Quick question. Do you know how many secrets your AI coding agent created last month?
That’s what this week’s Entra Chat episode with Arturo Lucatero is about.
Plus the new Microsoft Digital Defense Report, self-hosted Maester Cloud, and I’ll be at Workplace Ninja in Melbourne this month.
Let's dive in.
Your AI Coding Agent Is Creating Secrets You Don’t Know About
Ask a coding agent to build something that talks to another service and watch what it does. It creates a client secret. Then another one. As Arturo Lucatero puts it, next thing you know you have ten secrets that were created without you knowing about it. At the speed AI is moving, he thinks we could be cleaning up a few million new secrets within six mo…
Sponsored by:
ICYMI - From App Sprawl to Control in Entra ID
As app registrations, service principals, SaaS apps, and third-party integrations accumulate, your workload identity attack surface grows, and visibility gets clouded:
✅ Who owns each application?
✅ What can it access?
✅ Should it still be in your tenant?Learn practical steps to build stronger workload identity and application governance across the full lifecycle, from onboarding and ownership through permissions, credentials, ongoing review, and offboarding. Get real-world tips and grounded guidance from Entra experts: Merill Fernando, Nicolas Blank, and Alistair Pugin.
Workload identity governance shouldn’t mean more portal hopping, manual reviews, and one-by-one cleanup for already-stretched Entra admins. Get a clear picture of your app estate & what deserves your attention first.
⚡️ Microsoft
🔥 Public Preview
Sign in to Microsoft apps with passkeys from external identity providers • Justin Ploegert
📖 Read
Insights from the 2026 Microsoft Digital Defense Report • Terrell Cox
Star Blizzard refines phishing and malware delivery with the RedFlick technique • Microsoft Threat Intelligence
Phishing Abuses RMM Tools for Persistent Access • Microsoft Security Research
📆 Upcoming Events
From the community…
🚀 Most popular posts from last week
🥇 Where to store your Microsoft 365 passkey? • Jan Bakker
🥈 Synced Passkeys Appearing in Entra? Was SMS the reason? • Shane Mallia
🥉 Governing Exchange Distribution Lists with Entra ID (The No-Secrets Way) • Sandra Saluti
☀️ Learn
👩✈️ AI & Copilot
🧰 Workload ID
Service Principals Are Identities Too • Shaun Hardneck
👮♂️ ID Governance
Escalating Privileges as a Catalog Owner: How Microsoft Entra Identity Governance’s API Permission Management Could Be Abused • Thomas Naunheim
Dynamic PIM role activation picker • Aaron Guilmette
🌐 Private Access & Internet Access (GSA)
Microsoft Global Secure Access (GSA) Traffic Forwarding Profiles v2 • Richard M. Hicks
Global Secure Access – Multiple Traffic Forwarding profiles for Private Access is finally here! • Michael Morten Sonne
Entra ID – Use Microsoft managed PKI for TLS inspection with GSA • Benoit HAMET
How to control AI with GSA • Niklas Tinner
Sponsored by:
Maester Cloud is now available to self-host!
Maester Cloud is the portal companion to Maester. It runs in your own Azure subscription, and a guided setup gets you started.
Scheduled runs, plus drift tracking for every test
Email reports and alerts, with no Mail.Send permission granted in Entra
Your data stays in your Azure subscription, in the region you pick
It’s $99/month or $1,188/year, and also available on Azure Marketplace.
📦 Apps
Known EWS Apps that need Allow-Listing or a Migration – with AppIDs • Rudy Mens
📺 From App Registrations to Managed Identity: Identity Patterns for Secure Automation • Microsoft Community Learning
Authentication
Microsoft Entra Passkey Registration with WebAuthn: Handling Authenticator and App Protection Conditional Access Challenges • Sreejith Reghunathan Pillai
👥 User & Group Management
How Purview extends administrative units to support SharePoint Online sites • Vasil Michev
Entra/Office 365 - Group based license assignments failing • Benoit HAMET
🚦 Conditional Access
Microsoft Enforces Conditional Access on Outlook Attachments with a Dedicated Entra Application • Karthi
🖥️ Devices
Modernizing Shared Devices: Inside Microsoft’s New Passwordless Teams Resource Accounts • Colby Pryor
Android & macOS support for in-session passwordless authentication (Preview) • Flavio Meyer
♻️ Sync
Entra SCIM MCP v0.3.0 updates for changes to the Entra SCIM API • Darren Robinson
📒 Tenant Configuration
How to disable SMTP Authentication in Microsoft365 • Liam Robinson
🔥 Maester
👨🏽💻 Merill’s corner
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.