Entra 🆔 News #90 → This week in Microsoft Entra
Learn about 🔐 'Require reauthentication every time in CA' and 📦 'Custom Attributes support for Microsoft Entra Domain Services' going GA, 🛡️ new Security Copilot features for CA and more! ✨
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
We have two features going GA this week including the much awaited ‘Require reauthentication every time’ feature in conditional access. A note of warning, please use this feature with care, more MFA prompts <> more secure.
Also, check out the public preview announcement for using Entra to strengthen AI security and identity protection.
Enjoy!
Entra.Chat Podcast
🎧 Apple Podcast • 📺 Spotify • 🎧 Overcast • 🎧 Pocketcast • 🎧 Others
Sponsored by:
EasyEntra: Empower First-Level Support to Work Efficiently
Managing standard first-level user support in a hybrid environment is overly complex. To handle even basic tasks, your team needs expertise across multiple platforms like ADUC, Exchange on-premises Admin Center, M365 Admin Center, Entra Admin Center, EXO Admin Center, EXO PowerShell, and Entra Connect PowerShell.EasyEntra eliminates this complexity and allows first-level support to work without headaches:
✅ Intuitive – The interface mimics the familiar AD Users & Computers layout.
✅ Consolidated – Manage all user settings from a single-pane-of-glass.
✅ Responsive – Preloads all properties for lightning-fast navigation of settings.
✅ Reduces junior IT training – Onboard junior IT staff in minutes.
✅ Protects senior IT staff – Prevent first-level support tickets from escalating.
⚡️ Microsoft
🏆 General Availability
Conditional Access reauthentication policy (Require reauthentication every time) • Microsoft Learn
Custom Attributes support for Microsoft Entra Domain Services • Microsoft Learn
🔥 Public Preview
New innovations in Microsoft Entra to strengthen AI security and identity protection • Alex Simons
Limit creation or promotion of multitenant apps • Microsoft Learn
📖 Read
New user experience for consumer authentication • Robin Goldstein
US Department of Labor’s journey to Zero Trust security with Microsoft Entra ID • Joy Chik
📺 Watch
Create Custom reports for Microsoft Entra ID Governance data using Azure Data Explorer (8 min) • Rodrigo Castillo
Configure Entra Private Access and Quick Access in Microsoft Entra Global Secure Access (9 min) • Mohammad Zmaili
Microsoft's Zero Trust approach (30 min) • Heike Ritter, Clay Taylor
Sign into shared devices with a QR code and PIN—no need to enter long credentials. (1 min) • Microsoft Mechanics
🗣️ Message Center
From the community…
🚀 Most popular posts from last week
How to authenticate with Windows Hello for Business or FIDO security key in RDP session ? • Morten Knudsen
Essential Eight Compliance Assistant - A Free GPT that Makes Your Solution Architecture Assessment Easy! • Hassan Syed
Controlling Access to Microsoft 365 for Entra ID Apps • Tony Redmond
Sponsored by:
🔐🚀 Onboard & Secure Azure Services the Right Way—Start with the Entra ID Threat Model
Entra ID is the foundation of your Azure security—but do you have full visibility into its risks? Are the right controls in place to address your risk appetite? Built by TrustOnCloud, our ThreatModel for Entra ID gives you a clear, actionable security blueprint. We help organizations confidently adopt Azure, AWS, and GCP by securing over 220+ cloud services—so you’re not just in the cloud, you’re secure in it. The Entra ID ThreatModel helps you:
✅ Prioritise your control implementation based on risk and the threats that impact you.
✅ Map & mitigate attack techniques with MITRE ATT&CK
✅ Strengthen security controls with tested validation procedures
✅ Align controls with 318+ frameworks for compliance & regulatory coverage Get a sneak peek into our Entra ID ThreatModel with 3 sample threats, including detailed Data Flow Diagrams, Mitre ATT&CK mappings, and prioritized risk controls tailored for Azure services.
☀️ Learn
🌐 Private Access & Internet Access (GSA)
The Ultimate Microsoft 365 Upgrade You Didn’t Know You Already Paid For! (But Wait, There’s More!) • Dustin Gullett
Automate the deployment of Global Secure Access resources 🔥 • Brian Veldman
📦 Apps
Entra ID Application Management Policies • Brian Veldman
🔑 Authentication
A Comprehensive Overview of an SSO Implementation • Mateusz Jendza
🤖 DevOps & PowerShell
Access Graph resources across tenants without secrets or certificates! • Ben Reader
Setting up MCP Server to Entra ID / Graph with Lokka • Marius Sandbu
Manage M365 with Lokka & Claude AI • Rudy Mens
ASP.NET Core delegated Microsoft OBO access token management (Entra only) • Damien Bowden
Artificial Intelligence, PowerShell, and Microsoft 365 Administration • Tony Redmond
🚦 Conditional Access
Using KQL to Detect Gaps in your Conditional Access Strategy • Dylan Tenebruso
Azure devops as a Microsoft admin portal in conditional access • Jay Kerai
Conditional Access (CA) policy part 1 – Get started! • Kim André Vaksdal
Conditional Access (CA) policy part 2 • Kim André Vaksdal
🔐 Credential Management
Monitoring Passkeys Enrollment with Graph PS Module • Moe Kinani
🖥️ Devices
🏙️ External ID - Guests & Multi-Tenant Organizations
Duplicate Mail User Objects Created for Guest Accounts • Tony Redmond
🥷 Security
Creating immutable users through a bug in Entra ID restricted administrative units • Katie Knowles
Automatic Password Hacking Machine Confirmed—Stop Using Passwords Now • Davey Winder
Microsoft 365: Protect your environment against AiTM phishing attacks • Ricardo van der Linden
♻️ Sync
How to Upgrade Microsoft Entra Connect: A Step-by-Step Guide • Liam Robinson
⚒️ Toolkit
New MiToken Graph PowerShell module for multi-tenant apps • Daniel Bradley
🎙️ Podcasts
Conditional Access Done Right: Practical 365 Podcast • Louis Mastelinck, Steve Goodman, Bastiaan Verdonk
Exploring Microsoft's Global Secure Access: Practical 365 Podcast • Janice Ricketts, Steve Goodman, Bastiaan Verdonk
Identity Governance, JML, Serverless GPUs, SME's & Cybercrime, Azure Landing Zones & more MSFT Cloud (53 min) • David Rowley, Cyrus Irandoust, Richard Hogan
📺 Watch
Introduction to OAuth (13 min) • Roland Guijt
You Won’t Believe How Hackers Exploit Identity Tokens (33 min) • Ru Campbell, Dr Nestori Syynimaa
Your PIM roles aren't safe...Unless you do THIS! (4 min) • Nate Hutchinson
How to allow PIN reset for Windows Hello for Business (9 min) • Cybersecurity World
👨🏽💻 Merill’s corner
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. I pay my respect to them and their cultures and to elders both past and present.