👋 Hi, Merill and Joshua here with this week's roundup of the latest news on Microsoft Entra from around the globe 🌍.

The exciting news this week is for Microsoft 365 Business Premium customers who can now purchase Microsoft 365 E5 Security as an add-on (which includes Entra ID P2!).

Plus, I wrote a post about App Management policies in Entra now being available in the Entra ID free tier (no longer requiring Workload ID Premium).

Enjoy!

Sponsored by:

EasyEntra: Consolidated Hybrid Microsoft 365 Management
Managing Microsoft 365 and hybrid AD doesn’t have to be slow and complex. EasyEntra streamlines user administration into a single, intuitive console and enables first-level IT support to resolve tickets quickly, consistently, and without escalating to senior IT. With EasyEntra, you can save time, reduce complexity, and improve service delivery.
✅ Unified Hybrid Management – Seamlessly manage Entra ID and on-prem AD in one console.
✅ Fast & Responsive UI – Perform user admin tasks at the speed of your thought.
✅ User Lifecycle Automation – Streamline user onboarding and offboarding with consistent automation.
✅ Freemium Version – Manage any number of small tenants (< 25 licensed users) side-by-side completely free.
✅ No Infrastructure Changes – Install and configure in less than one minute.
Download Free Trial!

⚡️ Microsoft

🏆 General Availability

Microsoft 365 E5 Security is now available as an add-on to Microsoft 365 Business Premium • Oke Bamgbose

📺 Watch

Configure API driven Provisioning in Microsoft Entra ID Governance (12 min) • Jorge Lopez
Microsoft Entra custom authentication extension overview (9 min) • Yoel Horvitz, Steven Soneff
Microsoft Entra External ID: User activity insights (10 min) • Microsoft Security
Build Secure Multitenant Solutions: Identity and Access Management for ISVs (60 min) • Kyle Marsh, Merill Fernando, Vic Perdana

🗣️ Message Center

From the community…

🚀 Most popular posts from last week

Things you should know before rolling out device-bound passkeys in Microsoft Authenticator App • Jan Bakker
Password best practices • Michael Frank
Receiving Entra Admin Notifications without a Licensed Mailbox • Michele Blum

☀️ Learn

👮‍♂️ ID Governance

Lifecycle Workflows and Custom Extensions - step-by-step-guide • Klaus Bierschenk
The Jedi’s Guide to Automating Onboarding with Lifecycle Workflows • Dustin Gullett
Some (not so) recent improvements with Lifecycle Workflows in Entra • Vasil Michev
Tips for Entra ID On-Premises Provisioning with ECMA2 Connectors • Darren Robinson

🌐 Private Access & Internet Access (GSA)

📦 Apps

The Missing Intro To Flexible Federated Identity Credentials • Den Delimarsky
Building secure multi-tenant applications with Microsoft Entra ID: A guide for ISVs • Vic Perdana
Custom M365 Terms of Use Part 2: Entra Apps • Julian Sperling

🔑 Authentication

Passkeys for macOS and addressing the phishing resistant authentication registration loop • Rahul Jindal
Microsoft Entra ID: QR Code Sign-In (Public Preview) • Oliver Müller

🤖 DevOps & PowerShell

God Mode with a Timer: Using Logic Apps to Restrict Elevated Access in Entra • Sebastian Flæng Markdanner
Practical PowerShell: Restore an Entra ID Deleted User Account and Update Its User Principal Name • Tony Redmond
Practical Protection: Automating Inactive Account Blocking with PowerShell • Paul Robichaux
Microsoft Graph PowerShell SDK V2.26.1 Remains Flawed • Tony Redmond
Tips for Entra ID On-Premises Provisioning with ECMA2 Connectors • Darren Robinson

🚦 Conditional Access

Adaptive protection with Insider Risk Management and Conditional Access • Ewelina Paczkowska
Block Device Code • Julian Rasmussen

🖥️ Devices

Passkeys for macOS and addressing the phishing resistant authentication registration loop • Rahul Jindal
Troubleshooting Windows Hello for Business PIN Reset Issues – Something went wrong • Eswar Koneti
Reader questions: Controlling Local Admin via Microsoft Entra, and Which version of Autopilot should I be using? • Alex Fields

🏙️ External ID - Guests & Multi-Tenant Organizations

Entra ID SAML Federation with an External Identity Provider • Farooque

📈 Reporting and Insights

Create a Free Interactive License Usage Report for Microsoft 365 • Daniel Bradley

🥷 Security

Evilginx loves Temporary Access Passes too • Jan Bakker
(Ab)using AI to attack M365 and other services to conduct plethora of attacks • Subhash Popuri
Making Identity and Access Management More Resilient with Microsoft Entra ID • Shehan Perera

🛍️ External ID - Customers

Calling Graph API from inside an Azure AD B2C custom policy • Rory Braybrook
ASP.NET Core: Configuring Authentication with Azure AD B2C using Explicit Configuration • Jaliya Udagedara
Integrating both SMS and TOTP MFA in a single custom policy in Azure AD B2C and giving users the choice • Rory Braybrook

⚒️ Toolkit

Monkey365 v0.94.6-beta - Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.
- Added CIS Microsoft 365 Foundations Benchmark v4.0.0 • Juan Garrido

📺 Watch

Entra ID P1 vs P2: The Magic of Risk-Based Conditional Access (21 min) • Jonathan Edwards
Microsoft Entra ID Next Level Security with Face Check (25 min) • Andy Malone
Difference between MFA and phishing-resistant MFA (12 min) • Cybersecurity World
Azure API Management using OAuth via Entra ID (Live Demo) (41 min) • Luke Saunders

👨🏽‍💻 Merill’s corner

Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩

🪃 Acknowledgement of Country

Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. I pay my respect to them and their cultures and to elders both past and present.

Entra.News - Your weekly dose of Microsoft Entra

Entra 🆔 News #87 → This week in Microsoft…