👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
BTW If you are at Ignite I’ll be at eNow’s scheduleMaintenance party, come join us (request an invite, see the eNow ad below for the invite link).
Now I need to rush off and catch my flight to Ignite…
Which Passkey Should Your Users Get? The FIDO Alliance CTO on Passkeys and Post-Quantum Cryptography
Microsoft is moving millions of users off SMS and onto passkeys, and most admins now have to decide which kind of passkey each group of users should get. Nishant Kaushik, CTO of the FIDO Alliance, the industry body behind the passkey standards, explains the three flavours of workforce passkey, how to roll out hardware security keys without repeating the…
Enjoy!
Sponsored by:
Exclusive : Get 20% OFF on Altered Security’s Red Team Bootcamps!
Looking to sharpen your Red Team skills? Altered Security has an exclusive FLAT 20% DISCOUNT for Entra.News readers on upcoming Red Team Bootcamps! Use code ENTRANEWS20 to claim your offer.
Choose Your Training Track: CAIRTP (Nov 20, 2026), CRTP (Nov 21, 2026), ACPT & CARTP (Jan 15, 2027), CARTE (Jan 16, 2027), or CRTE (Jan 29, 2027).
What’s Included: 4 live instructor-led sessions (4 hours each), hands-on Lab access, practical lab exercises with flags to capture, session recordings, one certification exam attempt, and a bootcamp completion certificate.
Your Exclusive Offer: Get FLAT 20% OFF with promo code ENTRANEWS20. Valid until November 16, 2026, for upcoming Red Team Bootcamp batches currently open for enrollment.
⚡️ Microsoft
🔥 Public Preview
📖 Read
🗣️ Message Center
From the community…
🚀 Most popular posts from last week
🥇 A new Entra risk detection needs a policy to act on it • Stephen Bennett
🥈 How to secure passkey registration in Entra ID • Jan Bakker
🥉 Entra ID Allows Users to Change Passwords Without Knowing Their Old Password • Tony Redmond
Sponsored by:
Get your Entra ID Applications Ready for 2027
📆 Planning to introduce new agents, apps, and SaaS integrations in 2027? Or still working to clean up existing app sprawl, excessive permissions, and outdated credentials? Either way, stronger Entra ID app governance starts with knowing where your risks are today.
ENow’s Entra ID App Governance Playbook shows you:
The five governance gaps that widen your attack surface and potential blast radius, from over-permissioned apps to expired client secrets that disrupt operations and productivity
What to triage first, starting with tenant-wide defaults
How to spend the next 3 months building stronger governance and security postures, plus a foundation for ongoing app lifecycle governance
🎉 P.S If you’re heading to Microsoft Ignite, request an invite to our scheduleMaintenance party.
☀️ Learn
👩✈️ AI & Copilot
The Agentic Tenant: what agents execute under authority no one answers for • Julien Ly
Generative AI Insights in Microsoft Entra Global Secure Access! ❤️ • Brian Veldman
Using Inherited Permissions in Microsoft Entra OAuth OBO Flows for Agent Identities • Sachin Nandanwar
🧰 Workload ID
Federated subject recycling continued: AWS edition • Nicola Suter
Key Vault Managed Identity: The Secret You Should Not Store • steefjan1970
👮♂️ ID Governance
Check out the new Unified Roles preview for Entra ID • Daniel Bradley
Unified Roles Experience in the Microsoft Entra Admin Center • kanaga
M365Permissions Cloud v2 released! • Jos Lieben
🌐 Private Access & Internet Access (GSA)
Adding Delegated Graph Permissions to the Microsoft Graph Command Line Tools Enterprise App • Martin Heusser
New routing option in Global Secure Access Private Access: Performance. • Jan Bakker
📦 Apps
AADSTS700016: application not found in the directory, and the fix • Golam Rafi Badhon
Authentication
Which Passkey Should Your Users Get? The FIDO Alliance CTO on Passkeys and Post-Quantum Cryptography • Merill Fernando
Passkey Migration: A Practical Rollout Plan • Jonathan Hope
📺 Passkey Users Forget Their Password. Microsoft Just Fixed That (Entra ID) • Azure Brother
👥 User & Group Management
Using Exchange Custom Attributes for Groups Through the Microsoft Graph • Tony Redmond
Entra ID Previews Hard Deletion Protection • Tony Redmond
🤖 DevOps & PowerShell
Secure Data at Microsoft Ignite 2026: Plan Your Experience • Alma_Bencomo
🚦 Conditional Access
Secure Conditional Access exclusions with PIM and role-assignable groups • Christian Frohn and Joël Prins
An Interesting Find: Agent Session Risk in Microsoft Entra Conditional Access • Shanchana
Microsoft Entra Conditional Access Policy Plans: Less Sprawl, Same Need for Review • Daniel Chronlund
Conditional Access Filters With Custom Security Attributes: Target Apps, Not App Lists • Mark Oldham
Design Conditional Access like a non-Newtonian fluid • Mona Ghadiri
📺 Conditional Access Just Changed: Policy Plans - Everything You Need To Know! • Rio Hindle
📺 How to Simplify Conditional Access Policy Mess [2026] • Ru Campbell
📺 Quick overview of Conditional Access Policy Plans • John Savill’s Technical Training
🖥️ Devices
Maester Tests for CIS Benchmarks in Microsoft Intune • Joe Loveless
Faster Hybrid Windows Autopilot with Microsoft Entra Kerberos • Aljaz Perovsek - Cloud Journey
Ubuntu, Entra ID, Intune & Defender • Julian Rasmussen
Entra ID – You can now protect object from manual permanent deletion (preview) • Benoit HAMET
🏙️ External ID - Guests & Multi-Tenant Organizations
Entra – Identity governance lifecycle workflow for guest accounts (preview) • Benoit HAMET
Securing Microsoft Entra Guest Access (3/3): Monitoring with Log Analytics, KQL, and Alert Rules • Oliver Mueller
Automate Guest Cleanup with Entra Guest Lifecycle Policies • PaVee
📈 Reporting and Insights
How to Fetch Large Volumes of Entra Sign-In Events • Tony Redmond
📒 Tenant Configuration
Anatomy of a Real M365 Tenant • Julien Ly
🛍️ External ID - Customers
Security defaults in Entra External ID (EEID) • Rory Braybrook
Automating Entra External ID: CIAM and Branding • Benjamin Abt
🌿 More…
Automating Custom Email Alerts From Entra ID Audit and Other Logs • Brian Reid
Protecting Break Glass Accounts From Malicious Deletion • Brian Reid
You scoped an app to one mailbox. It read, sent, and wrote to all of them. • Darius Frank
Entra ID – Self Service Password Reset now allowing password change without knowing it after secure sign-in • Benoit HAMET
Microsoft 365 Outage • Rudy Mens
📺 Goodbye Windows Server Hybrid Hello Cloud Native! • Andy Malone
👨🏽💻 Merill’s corner
Quick heads up on an updated passkey registration experience.
TLDR Microsoft is making it easier for users to succesfully register any passkey to avoid hitting a brick wall.
I belive this also ends up guiding users to register synced passkeys (the webauthn flow) outside of Authenticator.
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.