AI Agents Need Their Own Identity: A Zero Trust Playbook
Stop wiring AI agents to shared secrets and borrowed service accounts. Treat every agent as a governed non-human identity with the controls you already run.
Posts by Tag
- Microsoft Entra 34
- Zero Trust 16
- Device Management 12
- Device Registration 11
- Entra ID Devices 11
- Identity and Security 11
- Join Types 10
- Global Secure Access 7
- Identity Governance 6
- Identity Security 5
- Certificate-Based Authentication 4
- Provisioning 4
- Conditional Access 4
- Microsoft Entra ID 4
- iOS Security 3
- AI Security 3
- External ID 3
- Microsoft Graph 3
- Passwordless 3
- Passkeys 3
- Phishing-Resistant 2
- PKI 2
- SAML 2
- Remote Networks 2
- OIDC 2
- Federation 2
- Governance 2
- Privileged Access 2
- Entitlement Management 2
- Incident Response 2
- MFA 2
- Agent Identity 2
- Lifecycle Workflows 2
- AI Governance 2
- FIDO2 2
- Post Formats 1
- notice 1
- System-Preferred MFA 1
- Phishing-Resistant MFA 1
- ID Governance 1
- Access Governance 1
- Certificate Authority 1
- Microsoft Identity Manager 1
- Hybrid Identity 1
- Azure SQL 1
- Managed Identity 1
- Identity Management 1
- Branding 1
- User Experience 1
- Authentication 1
- Mobile Identity 1
- Data Loss Prevention 1
- SaaS Security 1
- Workday 1
- Offboarding 1
- Token Lifetimes 1
- Identity Platform 1
- OAuth 1
- Internet Access 1
- Secure Web Gateway 1
- Branch Office 1
- SSE 1
- Cloud Firewall 1
- Branch Security 1
- Native Authentication 1
- Customer Identity 1
- OpenID Connect 1
- Social Sign-In 1
- License Optimization 1
- Entra Admin Center 1
- PIM 1
- Just-in-Time 1
- APIs 1
- Security Analytics 1
- Sign-In Logs 1
- My Access 1
- Access Reviews 1
- Private Access 1
- External Identities 1
- B2B Collaboration 1
- Microsoft Defender 1
- SOC 1
- iPadOS 1
- Microsoft Defender for Endpoint 1
- AI Gateway 1
- Prompt Injection 1
- Authentication Methods 1
- App Security 1
- Enterprise Applications 1
- Microsoft Entra External ID 1
- Azure AD B2C 1
- CIAM 1
- Migration 1
- Cross-tenant Access 1
- Group Management 1
- Devices 1
- Endpoint security 1
- Recovery 1
- B2B 1
- Azure RBAC 1
- Least privilege 1
- Windows Hello 1
- Linux 1
- Phishing-resistant MFA 1
- Intune 1
- My Account 1
- Security Info 1
- BitLocker 1
- Workload Identity 1
- SAP SuccessFactors 1
- Microsoft Purview 1
- Security groups 1
- Sensitivity labels 1
- Automation 1
- Attributes 1
Microsoft Entra
User attribute updates in Lifecycle Workflows
Lifecycle Workflows can now test an Update user attributes task for joiner, mover, and leaver automation.
Sensitivity Labels for Security Groups: Purview Classification Meets Entra Access
Microsoft Entra now lets you apply Purview sensitivity labels to cloud security groups in public preview — here’s why it matters and how to test it.
SAP SuccessFactors Provisioning Without Stored Passwords: Workload Identity Auth Hits Preview
SAP SuccessFactors HR provisioning can now use short-lived federated OIDC tokens instead of stored basic-auth passwords. Here’s how the Public Preview works.
Passkeys on Windows Hello: Familiar user experience, phishing-resistant sign-in
Passkeys on Windows Hello let users register device-bound FIDO2 credentials in the local Windows Hello container.
Passkey adoption with registration campaigns: Turn passwordless intent into registrations
Microsoft Entra registration campaigns can now nudge eligible users to register passkeys during sign-in.
Govern Azure roles with access packages
Access packages can now govern active and eligible Azure RBAC assignments at key Azure scopes in Public Preview.
Domainless SAML federation
Domainless SAML federation lets external users sign in with their own IdP even when email domains do not map cleanly.
Device soft delete in Microsoft Entra ID
Device soft delete moves deleted Entra device objects into a recoverable state instead of removing them immediately.
App Deactivation: A safer pause button for risky or retired applications
App Deactivation lets admins stop new token issuance while preserving app registration metadata and configuration.
Agent Identity Sponsorship Transitions: Keep ownership from going stale
Agent Identity Sponsorship Transitions help lifecycle workflows notify and transfer ownership when an agent sponsor changes.
Prompt Injection Protection in AI Gateway is Generally Available
Prompt injection is one of the first risks security teams run into once AI pilots turn into production workloads. Attackers craft inputs that trick a large...
Global Secure Access Client Arrives on iOS and iPadOS
Mobile access is always where policy consistency gets tested. People live in Microsoft 365 on iPhones and iPads, and if your Zero Trust controls stop at th...
Privileged Identity Response for SOCs in Microsoft Defender
When an account is compromised, every minute spent escalating to an IAM admin is a minute the attacker keeps working. Privileged Identity Response for SOCs...
External User Access Comes to the GSA Windows Client
Partner access usually breaks down at the handoff between identity and connectivity. You can invite a guest, but getting them to the right private app — wi...
View Approver Details for Access Package Requests is Generally Available
Access delays are often communication problems, not policy problems. A request sits pending, nobody knows who’s responsible, and the requestor opens a tick...
Optimize Sign-In Insights with Count in Microsoft Graph
If you build on Microsoft Entra sign-in data, this is a quietly important update. Microsoft Graph now supports $count in sign-in API requests, so your quer...
Enforce Conditional Access on PIM Role Activation
Privileged access should never ride on stale trust. A user who signed in hours ago and now wants to step into an admin role is a different risk than they w...
Track and Optimize Microsoft Entra License Usage is Generally Available
Most teams know exactly what licenses they bought. Far fewer can show how much of that capability is actually being used. That gap costs money at renewal a...
Social Identity Provider Support for Native Authentication is Generally Available
If you build customer-facing apps, you know the tension: users expect to sign in with the accounts they already have, but you don’t want to hand the whole ...
Federate External Tenants Using OIDC in Microsoft Entra External ID
Connecting workforce identity to customer-facing applications has long meant duplicate accounts — and duplicate accounts mean extra lifecycle work, inconsi...
Cloud Firewall with Remote Networks Goes GA in Global Secure Access
Even in a cloud-first architecture, branch traffic still needs old-school network control. The problem is that maintaining that control usually means rule ...
Secure Branch Office Internet Access with GSA Remote Networks is Generally Available
A lot of branch and remote-site traffic still comes from devices that will never run a client — printers, kiosks, IoT gear, shared workstations, and the li...
Explicit Forward Proxy for Microsoft Entra Internet Access
Plenty of internet traffic still originates from places where installing the Global Secure Access client just isn’t realistic — multi-session VDI, kiosks, ...
Configurable Token Lifetimes Arrive in Microsoft Entra ID
Token lifetime settings look minor on paper, but they shape how long access persists after it’s granted — and not every application deserves the same behav...
Prefetch Workday Termination Data is Generally Available
Offboarding delays are more than an HR annoyance — they’re an identity risk. Every hour an account stays active past someone’s last day is an hour of unnec...
Network Content Filtering by File Type in Global Secure Access is Generally Available
A lot of modern data loss looks completely ordinary. Someone uploads a spreadsheet to a generative AI tool, drags a PDF into personal mail, or pushes a con...
Certificate-Based Authentication Comes to iOS
Most organizations get phishing-resistant authentication working on the desktop and then stall at mobile. iPhones and iPads are where people actually do a ...
App-Specific Sign-In Experiences with Branding Themes in Microsoft Entra
For years, Microsoft Entra branding has been a tenant-wide decision. That’s fine when one identity maps to one audience — but most tenants don’t work that ...
Microsoft Identity Manager 2016 Service Pack 3 is Generally Available
For hybrid identity teams, stability work matters just as much as new features. Microsoft Identity Manager 2016 Service Pack 3 is now Generally Available, ...
Certificate Authority Scoping for CBA Lands in Microsoft Entra
In PKI-heavy environments, broad certificate trust gets messy fast. If every trusted certificate authority is valid for every user, you lose the ability to...
Account Discovery for Connected Applications in Microsoft Entra ID Governance
The hardest part of bringing an application into governance usually isn’t wiring up the connector — it’s answering a deceptively simple question: who alrea...
Issuer Hints for Certificate-Based Authentication is Generally Available
Anyone who has rolled out certificate-based authentication has seen it: a user opens the certificate picker, finds a long list of options, and guesses. The...
CBA Now Sits Higher in System-Preferred MFA on iOS
Strong authentication only helps if the platform actually steers people toward it. Users tend to pick whatever is fastest at the prompt, and on iOS certifi...
Zero Trust
AI Agents Need Their Own Identity: A Zero Trust Playbook
Stop wiring AI agents to shared secrets and borrowed service accounts. Treat every agent as a governed non-human identity with the controls you already run.
App Deactivation: A safer pause button for risky or retired applications
App Deactivation lets admins stop new token issuance while preserving app registration metadata and configuration.
Prompt Injection Protection in AI Gateway is Generally Available
Prompt injection is one of the first risks security teams run into once AI pilots turn into production workloads. Attackers craft inputs that trick a large...
Global Secure Access Client Arrives on iOS and iPadOS
Mobile access is always where policy consistency gets tested. People live in Microsoft 365 on iPhones and iPads, and if your Zero Trust controls stop at th...
External User Access Comes to the GSA Windows Client
Partner access usually breaks down at the handoff between identity and connectivity. You can invite a guest, but getting them to the right private app — wi...
View Approver Details for Access Package Requests is Generally Available
Access delays are often communication problems, not policy problems. A request sits pending, nobody knows who’s responsible, and the requestor opens a tick...
Enforce Conditional Access on PIM Role Activation
Privileged access should never ride on stale trust. A user who signed in hours ago and now wants to step into an admin role is a different risk than they w...
Cloud Firewall with Remote Networks Goes GA in Global Secure Access
Even in a cloud-first architecture, branch traffic still needs old-school network control. The problem is that maintaining that control usually means rule ...
Secure Branch Office Internet Access with GSA Remote Networks is Generally Available
A lot of branch and remote-site traffic still comes from devices that will never run a client — printers, kiosks, IoT gear, shared workstations, and the li...
Configurable Token Lifetimes Arrive in Microsoft Entra ID
Token lifetime settings look minor on paper, but they shape how long access persists after it’s granted — and not every application deserves the same behav...
Prefetch Workday Termination Data is Generally Available
Offboarding delays are more than an HR annoyance — they’re an identity risk. Every hour an account stays active past someone’s last day is an hour of unnec...
Network Content Filtering by File Type in Global Secure Access is Generally Available
A lot of modern data loss looks completely ordinary. Someone uploads a spreadsheet to a generative AI tool, drags a PDF into personal mail, or pushes a con...
Certificate-Based Authentication Comes to iOS
Most organizations get phishing-resistant authentication working on the desktop and then stall at mobile. iPhones and iPads are where people actually do a ...
Certificate Authority Scoping for CBA Lands in Microsoft Entra
In PKI-heavy environments, broad certificate trust gets messy fast. If every trusted certificate authority is valid for every user, you lose the ability to...
Issuer Hints for Certificate-Based Authentication is Generally Available
Anyone who has rolled out certificate-based authentication has seen it: a user opens the certificate picker, finds a long list of options, and guesses. The...
CBA Now Sits Higher in System-Preferred MFA on iOS
Strong authentication only helps if the platform actually steers people toward it. Users tend to pick whatever is fastest at the prompt, and on iOS certifi...
Device Management
Redesigned My Account Pages: Easier Self-Service in Microsoft Entra
Modernized My Account pages are generally available, giving users clearer self-service paths for account and device tasks.
Understanding Device Registration Join Types: When and Why to Use Each
In today’s digital landscape, securing devices and ensuring seamless access to corporate resources is paramount. As an Identity & Security expert, it’...
Do you have dual state devices in your AAD tenant?
We have observed recently many customers are asking why they do see the same device has two device objects on Azure AD, and connected twice to Azure AD as Az...
Responding to COVID-19: Azure AD Device FAQ
Responding to COVID-19 (aka. coronavirus) crisis, employees started working from home, and we start receiving many queries about Azure AD Devices. In this ar...
Configure hybrid Azure Active Directory join for remote users
The number of users working from home (WFH) increases in the response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and t...
Increase productivity and protection by connecting devices to AAD and configuring Device-based Conditional Access Policy
The number of users working from home (WFH) increases in response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and their...
Do I really need to connect my device to Azure AD?!
Lots of customers are asking if it is important to connect their devices to Azure AD, and what are the benefits of doing this.
Azure AD Pending Devices
Do you have pending devices in your Azure AD tenant? If so, then this article is definitely for you 🙂
Hybrid Azure AD Device Registration
In this article, I am discussing device registration for hybrid Azure AD joined devices. First of all, let’s go through device registration steps: The dev...
Configure Hybrid Azure AD joined with non-persistent VDI
When configuring Hybrid Azure AD joined devices with non-persistent Virtual Desktop Infrastructure (VDI) we face the following challenges: Non-persistent ...
Azure AD devices connection types
In a previous article I described why Do I really need to connect my device to Azure AD. In this article I will describe the available types of having device...
Azure PRT Login Status Report
When the user login successfully to Hybrid Azure AD device or Azure AD joined device, he acquires AzureAD PRT which is extremely important to enable Single S...
Device Registration
Understanding Device Registration Join Types: When and Why to Use Each
In today’s digital landscape, securing devices and ensuring seamless access to corporate resources is paramount. As an Identity & Security expert, it’...
Do you have dual state devices in your AAD tenant?
We have observed recently many customers are asking why they do see the same device has two device objects on Azure AD, and connected twice to Azure AD as Az...
Responding to COVID-19: Azure AD Device FAQ
Responding to COVID-19 (aka. coronavirus) crisis, employees started working from home, and we start receiving many queries about Azure AD Devices. In this ar...
Configure hybrid Azure Active Directory join for remote users
The number of users working from home (WFH) increases in the response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and t...
Increase productivity and protection by connecting devices to AAD and configuring Device-based Conditional Access Policy
The number of users working from home (WFH) increases in response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and their...
Do I really need to connect my device to Azure AD?!
Lots of customers are asking if it is important to connect their devices to Azure AD, and what are the benefits of doing this.
Azure AD Pending Devices
Do you have pending devices in your Azure AD tenant? If so, then this article is definitely for you 🙂
Hybrid Azure AD Device Registration
In this article, I am discussing device registration for hybrid Azure AD joined devices. First of all, let’s go through device registration steps: The dev...
Configure Hybrid Azure AD joined with non-persistent VDI
When configuring Hybrid Azure AD joined devices with non-persistent Virtual Desktop Infrastructure (VDI) we face the following challenges: Non-persistent ...
Azure AD devices connection types
In a previous article I described why Do I really need to connect my device to Azure AD. In this article I will describe the available types of having device...
Azure PRT Login Status Report
When the user login successfully to Hybrid Azure AD device or Azure AD joined device, he acquires AzureAD PRT which is extremely important to enable Single S...
Entra ID Devices
Understanding Device Registration Join Types: When and Why to Use Each
In today’s digital landscape, securing devices and ensuring seamless access to corporate resources is paramount. As an Identity & Security expert, it’...
Do you have dual state devices in your AAD tenant?
We have observed recently many customers are asking why they do see the same device has two device objects on Azure AD, and connected twice to Azure AD as Az...
Responding to COVID-19: Azure AD Device FAQ
Responding to COVID-19 (aka. coronavirus) crisis, employees started working from home, and we start receiving many queries about Azure AD Devices. In this ar...
Configure hybrid Azure Active Directory join for remote users
The number of users working from home (WFH) increases in the response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and t...
Increase productivity and protection by connecting devices to AAD and configuring Device-based Conditional Access Policy
The number of users working from home (WFH) increases in response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and their...
Do I really need to connect my device to Azure AD?!
Lots of customers are asking if it is important to connect their devices to Azure AD, and what are the benefits of doing this.
Azure AD Pending Devices
Do you have pending devices in your Azure AD tenant? If so, then this article is definitely for you 🙂
Hybrid Azure AD Device Registration
In this article, I am discussing device registration for hybrid Azure AD joined devices. First of all, let’s go through device registration steps: The dev...
Configure Hybrid Azure AD joined with non-persistent VDI
When configuring Hybrid Azure AD joined devices with non-persistent Virtual Desktop Infrastructure (VDI) we face the following challenges: Non-persistent ...
Azure AD devices connection types
In a previous article I described why Do I really need to connect my device to Azure AD. In this article I will describe the available types of having device...
Azure PRT Login Status Report
When the user login successfully to Hybrid Azure AD device or Azure AD joined device, he acquires AzureAD PRT which is extremely important to enable Single S...
Identity and Security
Understanding Device Registration Join Types: When and Why to Use Each
In today’s digital landscape, securing devices and ensuring seamless access to corporate resources is paramount. As an Identity & Security expert, it’...
Do you have dual state devices in your AAD tenant?
We have observed recently many customers are asking why they do see the same device has two device objects on Azure AD, and connected twice to Azure AD as Az...
Responding to COVID-19: Azure AD Device FAQ
Responding to COVID-19 (aka. coronavirus) crisis, employees started working from home, and we start receiving many queries about Azure AD Devices. In this ar...
Configure hybrid Azure Active Directory join for remote users
The number of users working from home (WFH) increases in the response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and t...
Increase productivity and protection by connecting devices to AAD and configuring Device-based Conditional Access Policy
The number of users working from home (WFH) increases in response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and their...
Do I really need to connect my device to Azure AD?!
Lots of customers are asking if it is important to connect their devices to Azure AD, and what are the benefits of doing this.
Azure AD Pending Devices
Do you have pending devices in your Azure AD tenant? If so, then this article is definitely for you 🙂
Hybrid Azure AD Device Registration
In this article, I am discussing device registration for hybrid Azure AD joined devices. First of all, let’s go through device registration steps: The dev...
Configure Hybrid Azure AD joined with non-persistent VDI
When configuring Hybrid Azure AD joined devices with non-persistent Virtual Desktop Infrastructure (VDI) we face the following challenges: Non-persistent ...
Azure AD devices connection types
In a previous article I described why Do I really need to connect my device to Azure AD. In this article I will describe the available types of having device...
Azure PRT Login Status Report
When the user login successfully to Hybrid Azure AD device or Azure AD joined device, he acquires AzureAD PRT which is extremely important to enable Single S...
Join Types
Understanding Device Registration Join Types: When and Why to Use Each
In today’s digital landscape, securing devices and ensuring seamless access to corporate resources is paramount. As an Identity & Security expert, it’...
Responding to COVID-19: Azure AD Device FAQ
Responding to COVID-19 (aka. coronavirus) crisis, employees started working from home, and we start receiving many queries about Azure AD Devices. In this ar...
Configure hybrid Azure Active Directory join for remote users
The number of users working from home (WFH) increases in the response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and t...
Increase productivity and protection by connecting devices to AAD and configuring Device-based Conditional Access Policy
The number of users working from home (WFH) increases in response of COVID-19 (aka. coronavirus) outbreak, and we need to make sure that identities and their...
Do I really need to connect my device to Azure AD?!
Lots of customers are asking if it is important to connect their devices to Azure AD, and what are the benefits of doing this.
Azure AD Pending Devices
Do you have pending devices in your Azure AD tenant? If so, then this article is definitely for you 🙂
Hybrid Azure AD Device Registration
In this article, I am discussing device registration for hybrid Azure AD joined devices. First of all, let’s go through device registration steps: The dev...
Configure Hybrid Azure AD joined with non-persistent VDI
When configuring Hybrid Azure AD joined devices with non-persistent Virtual Desktop Infrastructure (VDI) we face the following challenges: Non-persistent ...
Azure AD devices connection types
In a previous article I described why Do I really need to connect my device to Azure AD. In this article I will describe the available types of having device...
Azure PRT Login Status Report
When the user login successfully to Hybrid Azure AD device or Azure AD joined device, he acquires AzureAD PRT which is extremely important to enable Single S...
Global Secure Access
Prompt Injection Protection in AI Gateway is Generally Available
Prompt injection is one of the first risks security teams run into once AI pilots turn into production workloads. Attackers craft inputs that trick a large...
Global Secure Access Client Arrives on iOS and iPadOS
Mobile access is always where policy consistency gets tested. People live in Microsoft 365 on iPhones and iPads, and if your Zero Trust controls stop at th...
External User Access Comes to the GSA Windows Client
Partner access usually breaks down at the handoff between identity and connectivity. You can invite a guest, but getting them to the right private app — wi...
Cloud Firewall with Remote Networks Goes GA in Global Secure Access
Even in a cloud-first architecture, branch traffic still needs old-school network control. The problem is that maintaining that control usually means rule ...
Secure Branch Office Internet Access with GSA Remote Networks is Generally Available
A lot of branch and remote-site traffic still comes from devices that will never run a client — printers, kiosks, IoT gear, shared workstations, and the li...
Explicit Forward Proxy for Microsoft Entra Internet Access
Plenty of internet traffic still originates from places where installing the Global Secure Access client just isn’t realistic — multi-session VDI, kiosks, ...
Network Content Filtering by File Type in Global Secure Access is Generally Available
A lot of modern data loss looks completely ordinary. Someone uploads a spreadsheet to a generative AI tool, drags a PDF into personal mail, or pushes a con...
Identity Governance
User attribute updates in Lifecycle Workflows
Lifecycle Workflows can now test an Update user attributes task for joiner, mover, and leaver automation.
Govern Azure roles with access packages
Access packages can now govern active and eligible Azure RBAC assignments at key Azure scopes in Public Preview.
Cross-Tenant Group Synchronization
Cross-tenant group synchronization is generally available for synchronizing security groups and memberships across Entra tenants.
Agent Identity Sponsorship Transitions: Keep ownership from going stale
Agent Identity Sponsorship Transitions help lifecycle workflows notify and transfer ownership when an agent sponsor changes.
View Approver Details for Access Package Requests is Generally Available
Access delays are often communication problems, not policy problems. A request sits pending, nobody knows who’s responsible, and the requestor opens a tick...
Prefetch Workday Termination Data is Generally Available
Offboarding delays are more than an HR annoyance — they’re an identity risk. Every hour an account stays active past someone’s last day is an hour of unnec...
Identity Security
Track and Optimize Microsoft Entra License Usage is Generally Available
Most teams know exactly what licenses they bought. Far fewer can show how much of that capability is actually being used. That gap costs money at renewal a...
Federate External Tenants Using OIDC in Microsoft Entra External ID
Connecting workforce identity to customer-facing applications has long meant duplicate accounts — and duplicate accounts mean extra lifecycle work, inconsi...
App-Specific Sign-In Experiences with Branding Themes in Microsoft Entra
For years, Microsoft Entra branding has been a tenant-wide decision. That’s fine when one identity maps to one audience — but most tenants don’t work that ...
Certificate Authority Scoping for CBA Lands in Microsoft Entra
In PKI-heavy environments, broad certificate trust gets messy fast. If every trusted certificate authority is valid for every user, you lose the ability to...
Account Discovery for Connected Applications in Microsoft Entra ID Governance
The hardest part of bringing an application into governance usually isn’t wiring up the connector — it’s answering a deceptively simple question: who alrea...
Certificate-Based Authentication
Certificate-Based Authentication Comes to iOS
Most organizations get phishing-resistant authentication working on the desktop and then stall at mobile. iPhones and iPads are where people actually do a ...
Certificate Authority Scoping for CBA Lands in Microsoft Entra
In PKI-heavy environments, broad certificate trust gets messy fast. If every trusted certificate authority is valid for every user, you lose the ability to...
Issuer Hints for Certificate-Based Authentication is Generally Available
Anyone who has rolled out certificate-based authentication has seen it: a user opens the certificate picker, finds a long list of options, and guesses. The...
CBA Now Sits Higher in System-Preferred MFA on iOS
Strong authentication only helps if the platform actually steers people toward it. Users tend to pick whatever is fastest at the prompt, and on iOS certifi...
Provisioning
SAP SuccessFactors Provisioning Without Stored Passwords: Workload Identity Auth Hits Preview
SAP SuccessFactors HR provisioning can now use short-lived federated OIDC tokens instead of stored basic-auth passwords. Here’s how the Public Preview works.
Cross-Tenant Group Synchronization
Cross-tenant group synchronization is generally available for synchronizing security groups and memberships across Entra tenants.
Prefetch Workday Termination Data is Generally Available
Offboarding delays are more than an HR annoyance — they’re an identity risk. Every hour an account stays active past someone’s last day is an hour of unnec...
Account Discovery for Connected Applications in Microsoft Entra ID Governance
The hardest part of bringing an application into governance usually isn’t wiring up the connector — it’s answering a deceptively simple question: who alrea...
Conditional Access
Phish-Resistant MFA for Linux Desktops
Microsoft single sign-on for Linux is generally available, bringing Entra registration, brokered SSO, and device-based controls to Linux desktops.
Enforce Conditional Access on PIM Role Activation
Privileged access should never ride on stale trust. A user who signed in hours ago and now wants to step into an admin role is a different risk than they w...
Track and Optimize Microsoft Entra License Usage is Generally Available
Most teams know exactly what licenses they bought. Far fewer can show how much of that capability is actually being used. That gap costs money at renewal a...
Explicit Forward Proxy for Microsoft Entra Internet Access
Plenty of internet traffic still originates from places where installing the Global Secure Access client just isn’t realistic — multi-session VDI, kiosks, ...
Microsoft Entra ID
Redesigned My Account Pages: Easier Self-Service in Microsoft Entra
Modernized My Account pages are generally available, giving users clearer self-service paths for account and device tasks.
Phish-Resistant MFA for Linux Desktops
Microsoft single sign-on for Linux is generally available, bringing Entra registration, brokered SSO, and device-based controls to Linux desktops.
Cross-Tenant Group Synchronization
Cross-tenant group synchronization is generally available for synchronizing security groups and memberships across Entra tenants.
System-Preferred Authentication for First and Second Factors
System-preferred authentication now applies to first-factor and second-factor sign-in when Microsoft managed settings are used.
iOS Security
Global Secure Access Client Arrives on iOS and iPadOS
Mobile access is always where policy consistency gets tested. People live in Microsoft 365 on iPhones and iPads, and if your Zero Trust controls stop at th...
Certificate-Based Authentication Comes to iOS
Most organizations get phishing-resistant authentication working on the desktop and then stall at mobile. iPhones and iPads are where people actually do a ...
CBA Now Sits Higher in System-Preferred MFA on iOS
Strong authentication only helps if the platform actually steers people toward it. Users tend to pick whatever is fastest at the prompt, and on iOS certifi...
AI Security
AI Agents Need Their Own Identity: A Zero Trust Playbook
Stop wiring AI agents to shared secrets and borrowed service accounts. Treat every agent as a governed non-human identity with the controls you already run.
Prompt Injection Protection in AI Gateway is Generally Available
Prompt injection is one of the first risks security teams run into once AI pilots turn into production workloads. Attackers craft inputs that trick a large...
Network Content Filtering by File Type in Global Secure Access is Generally Available
A lot of modern data loss looks completely ordinary. Someone uploads a spreadsheet to a generative AI tool, drags a PDF into personal mail, or pushes a con...
External ID
Domainless SAML federation
Domainless SAML federation lets external users sign in with their own IdP even when email domains do not map cleanly.
Social Identity Provider Support for Native Authentication is Generally Available
If you build customer-facing apps, you know the tension: users expect to sign in with the accounts they already have, but you don’t want to hand the whole ...
Federate External Tenants Using OIDC in Microsoft Entra External ID
Connecting workforce identity to customer-facing applications has long meant duplicate accounts — and duplicate accounts mean extra lifecycle work, inconsi...
Microsoft Graph
Device soft delete in Microsoft Entra ID
Device soft delete moves deleted Entra device objects into a recoverable state instead of removing them immediately.
B2C to External ID Migration: HSC Mode
High Scale Compatibility mode is generally available for phased Azure AD B2C migrations to Microsoft Entra External ID.
Optimize Sign-In Insights with Count in Microsoft Graph
If you build on Microsoft Entra sign-in data, this is a quietly important update. Microsoft Graph now supports $count in sign-in API requests, so your quer...
Passwordless
Passkeys on Windows Hello: Familiar user experience, phishing-resistant sign-in
Passkeys on Windows Hello let users register device-bound FIDO2 credentials in the local Windows Hello container.
Passkey adoption with registration campaigns: Turn passwordless intent into registrations
Microsoft Entra registration campaigns can now nudge eligible users to register passkeys during sign-in.
System-Preferred Authentication for First and Second Factors
System-preferred authentication now applies to first-factor and second-factor sign-in when Microsoft managed settings are used.
Passkeys
Passkeys on Windows Hello: Familiar user experience, phishing-resistant sign-in
Passkeys on Windows Hello let users register device-bound FIDO2 credentials in the local Windows Hello container.
Passkey adoption with registration campaigns: Turn passwordless intent into registrations
Microsoft Entra registration campaigns can now nudge eligible users to register passkeys during sign-in.
System-Preferred Authentication for First and Second Factors
System-preferred authentication now applies to first-factor and second-factor sign-in when Microsoft managed settings are used.
Phishing-Resistant
Certificate-Based Authentication Comes to iOS
Most organizations get phishing-resistant authentication working on the desktop and then stall at mobile. iPhones and iPads are where people actually do a ...
CBA Now Sits Higher in System-Preferred MFA on iOS
Strong authentication only helps if the platform actually steers people toward it. Users tend to pick whatever is fastest at the prompt, and on iOS certifi...
PKI
Certificate Authority Scoping for CBA Lands in Microsoft Entra
In PKI-heavy environments, broad certificate trust gets messy fast. If every trusted certificate authority is valid for every user, you lose the ability to...
Issuer Hints for Certificate-Based Authentication is Generally Available
Anyone who has rolled out certificate-based authentication has seen it: a user opens the certificate picker, finds a long list of options, and guesses. The...
SAML
Domainless SAML federation
Domainless SAML federation lets external users sign in with their own IdP even when email domains do not map cleanly.
Configurable Token Lifetimes Arrive in Microsoft Entra ID
Token lifetime settings look minor on paper, but they shape how long access persists after it’s granted — and not every application deserves the same behav...
Remote Networks
Cloud Firewall with Remote Networks Goes GA in Global Secure Access
Even in a cloud-first architecture, branch traffic still needs old-school network control. The problem is that maintaining that control usually means rule ...
Secure Branch Office Internet Access with GSA Remote Networks is Generally Available
A lot of branch and remote-site traffic still comes from devices that will never run a client — printers, kiosks, IoT gear, shared workstations, and the li...
OIDC
SAP SuccessFactors Provisioning Without Stored Passwords: Workload Identity Auth Hits Preview
SAP SuccessFactors HR provisioning can now use short-lived federated OIDC tokens instead of stored basic-auth passwords. Here’s how the Public Preview works.
Federate External Tenants Using OIDC in Microsoft Entra External ID
Connecting workforce identity to customer-facing applications has long meant duplicate accounts — and duplicate accounts mean extra lifecycle work, inconsi...
Federation
Domainless SAML federation
Domainless SAML federation lets external users sign in with their own IdP even when email domains do not map cleanly.
Federate External Tenants Using OIDC in Microsoft Entra External ID
Connecting workforce identity to customer-facing applications has long meant duplicate accounts — and duplicate accounts mean extra lifecycle work, inconsi...
Governance
Sensitivity Labels for Security Groups: Purview Classification Meets Entra Access
Microsoft Entra now lets you apply Purview sensitivity labels to cloud security groups in public preview — here’s why it matters and how to test it.
Track and Optimize Microsoft Entra License Usage is Generally Available
Most teams know exactly what licenses they bought. Far fewer can show how much of that capability is actually being used. That gap costs money at renewal a...
Privileged Access
Privileged Identity Response for SOCs in Microsoft Defender
When an account is compromised, every minute spent escalating to an IAM admin is a minute the attacker keeps working. Privileged Identity Response for SOCs...
Enforce Conditional Access on PIM Role Activation
Privileged access should never ride on stale trust. A user who signed in hours ago and now wants to step into an admin role is a different risk than they w...
Entitlement Management
Govern Azure roles with access packages
Access packages can now govern active and eligible Azure RBAC assignments at key Azure scopes in Public Preview.
View Approver Details for Access Package Requests is Generally Available
Access delays are often communication problems, not policy problems. A request sits pending, nobody knows who’s responsible, and the requestor opens a tick...
Incident Response
App Deactivation: A safer pause button for risky or retired applications
App Deactivation lets admins stop new token issuance while preserving app registration metadata and configuration.
Privileged Identity Response for SOCs in Microsoft Defender
When an account is compromised, every minute spent escalating to an IAM admin is a minute the attacker keeps working. Privileged Identity Response for SOCs...
MFA
Passkey adoption with registration campaigns: Turn passwordless intent into registrations
Microsoft Entra registration campaigns can now nudge eligible users to register passkeys during sign-in.
System-Preferred Authentication for First and Second Factors
System-preferred authentication now applies to first-factor and second-factor sign-in when Microsoft managed settings are used.
Agent Identity
AI Agents Need Their Own Identity: A Zero Trust Playbook
Stop wiring AI agents to shared secrets and borrowed service accounts. Treat every agent as a governed non-human identity with the controls you already run.
Agent Identity Sponsorship Transitions: Keep ownership from going stale
Agent Identity Sponsorship Transitions help lifecycle workflows notify and transfer ownership when an agent sponsor changes.
Lifecycle Workflows
User attribute updates in Lifecycle Workflows
Lifecycle Workflows can now test an Update user attributes task for joiner, mover, and leaver automation.
Agent Identity Sponsorship Transitions: Keep ownership from going stale
Agent Identity Sponsorship Transitions help lifecycle workflows notify and transfer ownership when an agent sponsor changes.
AI Governance
AI Agents Need Their Own Identity: A Zero Trust Playbook
Stop wiring AI agents to shared secrets and borrowed service accounts. Treat every agent as a governed non-human identity with the controls you already run.
Agent Identity Sponsorship Transitions: Keep ownership from going stale
Agent Identity Sponsorship Transitions help lifecycle workflows notify and transfer ownership when an agent sponsor changes.
FIDO2
Passkeys on Windows Hello: Familiar user experience, phishing-resistant sign-in
Passkeys on Windows Hello let users register device-bound FIDO2 credentials in the local Windows Hello container.
Passkey adoption with registration campaigns: Turn passwordless intent into registrations
Microsoft Entra registration campaigns can now nudge eligible users to register passkeys during sign-in.
Post Formats
Post: Notice
A notice displays information that explains nearby content. Often used to call attention to a particular detail.
notice
Post: Notice
A notice displays information that explains nearby content. Often used to call attention to a particular detail.
System-Preferred MFA
CBA Now Sits Higher in System-Preferred MFA on iOS
Strong authentication only helps if the platform actually steers people toward it. Users tend to pick whatever is fastest at the prompt, and on iOS certifi...
Phishing-Resistant MFA
Issuer Hints for Certificate-Based Authentication is Generally Available
Anyone who has rolled out certificate-based authentication has seen it: a user opens the certificate picker, finds a long list of options, and guesses. The...
ID Governance
Account Discovery for Connected Applications in Microsoft Entra ID Governance
The hardest part of bringing an application into governance usually isn’t wiring up the connector — it’s answering a deceptively simple question: who alrea...
Access Governance
Account Discovery for Connected Applications in Microsoft Entra ID Governance
The hardest part of bringing an application into governance usually isn’t wiring up the connector — it’s answering a deceptively simple question: who alrea...
Microsoft Identity Manager
Microsoft Identity Manager 2016 Service Pack 3 is Generally Available
For hybrid identity teams, stability work matters just as much as new features. Microsoft Identity Manager 2016 Service Pack 3 is now Generally Available, ...
Hybrid Identity
Microsoft Identity Manager 2016 Service Pack 3 is Generally Available
For hybrid identity teams, stability work matters just as much as new features. Microsoft Identity Manager 2016 Service Pack 3 is now Generally Available, ...
Azure SQL
Microsoft Identity Manager 2016 Service Pack 3 is Generally Available
For hybrid identity teams, stability work matters just as much as new features. Microsoft Identity Manager 2016 Service Pack 3 is now Generally Available, ...
Managed Identity
Microsoft Identity Manager 2016 Service Pack 3 is Generally Available
For hybrid identity teams, stability work matters just as much as new features. Microsoft Identity Manager 2016 Service Pack 3 is now Generally Available, ...
Identity Management
Microsoft Identity Manager 2016 Service Pack 3 is Generally Available
For hybrid identity teams, stability work matters just as much as new features. Microsoft Identity Manager 2016 Service Pack 3 is now Generally Available, ...
Branding
App-Specific Sign-In Experiences with Branding Themes in Microsoft Entra
For years, Microsoft Entra branding has been a tenant-wide decision. That’s fine when one identity maps to one audience — but most tenants don’t work that ...
User Experience
App-Specific Sign-In Experiences with Branding Themes in Microsoft Entra
For years, Microsoft Entra branding has been a tenant-wide decision. That’s fine when one identity maps to one audience — but most tenants don’t work that ...
Authentication
App-Specific Sign-In Experiences with Branding Themes in Microsoft Entra
For years, Microsoft Entra branding has been a tenant-wide decision. That’s fine when one identity maps to one audience — but most tenants don’t work that ...
Mobile Identity
Certificate-Based Authentication Comes to iOS
Most organizations get phishing-resistant authentication working on the desktop and then stall at mobile. iPhones and iPads are where people actually do a ...
Data Loss Prevention
Network Content Filtering by File Type in Global Secure Access is Generally Available
A lot of modern data loss looks completely ordinary. Someone uploads a spreadsheet to a generative AI tool, drags a PDF into personal mail, or pushes a con...
SaaS Security
Network Content Filtering by File Type in Global Secure Access is Generally Available
A lot of modern data loss looks completely ordinary. Someone uploads a spreadsheet to a generative AI tool, drags a PDF into personal mail, or pushes a con...
Workday
Prefetch Workday Termination Data is Generally Available
Offboarding delays are more than an HR annoyance — they’re an identity risk. Every hour an account stays active past someone’s last day is an hour of unnec...
Offboarding
Prefetch Workday Termination Data is Generally Available
Offboarding delays are more than an HR annoyance — they’re an identity risk. Every hour an account stays active past someone’s last day is an hour of unnec...
Token Lifetimes
Configurable Token Lifetimes Arrive in Microsoft Entra ID
Token lifetime settings look minor on paper, but they shape how long access persists after it’s granted — and not every application deserves the same behav...
Identity Platform
Configurable Token Lifetimes Arrive in Microsoft Entra ID
Token lifetime settings look minor on paper, but they shape how long access persists after it’s granted — and not every application deserves the same behav...
OAuth
Configurable Token Lifetimes Arrive in Microsoft Entra ID
Token lifetime settings look minor on paper, but they shape how long access persists after it’s granted — and not every application deserves the same behav...
Internet Access
Explicit Forward Proxy for Microsoft Entra Internet Access
Plenty of internet traffic still originates from places where installing the Global Secure Access client just isn’t realistic — multi-session VDI, kiosks, ...
Secure Web Gateway
Explicit Forward Proxy for Microsoft Entra Internet Access
Plenty of internet traffic still originates from places where installing the Global Secure Access client just isn’t realistic — multi-session VDI, kiosks, ...
Branch Office
Secure Branch Office Internet Access with GSA Remote Networks is Generally Available
A lot of branch and remote-site traffic still comes from devices that will never run a client — printers, kiosks, IoT gear, shared workstations, and the li...
SSE
Secure Branch Office Internet Access with GSA Remote Networks is Generally Available
A lot of branch and remote-site traffic still comes from devices that will never run a client — printers, kiosks, IoT gear, shared workstations, and the li...
Cloud Firewall
Cloud Firewall with Remote Networks Goes GA in Global Secure Access
Even in a cloud-first architecture, branch traffic still needs old-school network control. The problem is that maintaining that control usually means rule ...
Branch Security
Cloud Firewall with Remote Networks Goes GA in Global Secure Access
Even in a cloud-first architecture, branch traffic still needs old-school network control. The problem is that maintaining that control usually means rule ...
Native Authentication
Social Identity Provider Support for Native Authentication is Generally Available
If you build customer-facing apps, you know the tension: users expect to sign in with the accounts they already have, but you don’t want to hand the whole ...
Customer Identity
Social Identity Provider Support for Native Authentication is Generally Available
If you build customer-facing apps, you know the tension: users expect to sign in with the accounts they already have, but you don’t want to hand the whole ...
OpenID Connect
Social Identity Provider Support for Native Authentication is Generally Available
If you build customer-facing apps, you know the tension: users expect to sign in with the accounts they already have, but you don’t want to hand the whole ...
License Optimization
Track and Optimize Microsoft Entra License Usage is Generally Available
Most teams know exactly what licenses they bought. Far fewer can show how much of that capability is actually being used. That gap costs money at renewal a...
Entra Admin Center
Track and Optimize Microsoft Entra License Usage is Generally Available
Most teams know exactly what licenses they bought. Far fewer can show how much of that capability is actually being used. That gap costs money at renewal a...
PIM
Enforce Conditional Access on PIM Role Activation
Privileged access should never ride on stale trust. A user who signed in hours ago and now wants to step into an admin role is a different risk than they w...
Just-in-Time
Enforce Conditional Access on PIM Role Activation
Privileged access should never ride on stale trust. A user who signed in hours ago and now wants to step into an admin role is a different risk than they w...
APIs
Optimize Sign-In Insights with Count in Microsoft Graph
If you build on Microsoft Entra sign-in data, this is a quietly important update. Microsoft Graph now supports $count in sign-in API requests, so your quer...
Security Analytics
Optimize Sign-In Insights with Count in Microsoft Graph
If you build on Microsoft Entra sign-in data, this is a quietly important update. Microsoft Graph now supports $count in sign-in API requests, so your quer...
Sign-In Logs
Optimize Sign-In Insights with Count in Microsoft Graph
If you build on Microsoft Entra sign-in data, this is a quietly important update. Microsoft Graph now supports $count in sign-in API requests, so your quer...
My Access
View Approver Details for Access Package Requests is Generally Available
Access delays are often communication problems, not policy problems. A request sits pending, nobody knows who’s responsible, and the requestor opens a tick...
Access Reviews
View Approver Details for Access Package Requests is Generally Available
Access delays are often communication problems, not policy problems. A request sits pending, nobody knows who’s responsible, and the requestor opens a tick...
Private Access
External User Access Comes to the GSA Windows Client
Partner access usually breaks down at the handoff between identity and connectivity. You can invite a guest, but getting them to the right private app — wi...
External Identities
External User Access Comes to the GSA Windows Client
Partner access usually breaks down at the handoff between identity and connectivity. You can invite a guest, but getting them to the right private app — wi...
B2B Collaboration
External User Access Comes to the GSA Windows Client
Partner access usually breaks down at the handoff between identity and connectivity. You can invite a guest, but getting them to the right private app — wi...
Microsoft Defender
Privileged Identity Response for SOCs in Microsoft Defender
When an account is compromised, every minute spent escalating to an IAM admin is a minute the attacker keeps working. Privileged Identity Response for SOCs...
SOC
Privileged Identity Response for SOCs in Microsoft Defender
When an account is compromised, every minute spent escalating to an IAM admin is a minute the attacker keeps working. Privileged Identity Response for SOCs...
iPadOS
Global Secure Access Client Arrives on iOS and iPadOS
Mobile access is always where policy consistency gets tested. People live in Microsoft 365 on iPhones and iPads, and if your Zero Trust controls stop at th...
Microsoft Defender for Endpoint
Global Secure Access Client Arrives on iOS and iPadOS
Mobile access is always where policy consistency gets tested. People live in Microsoft 365 on iPhones and iPads, and if your Zero Trust controls stop at th...
AI Gateway
Prompt Injection Protection in AI Gateway is Generally Available
Prompt injection is one of the first risks security teams run into once AI pilots turn into production workloads. Attackers craft inputs that trick a large...
Prompt Injection
Prompt Injection Protection in AI Gateway is Generally Available
Prompt injection is one of the first risks security teams run into once AI pilots turn into production workloads. Attackers craft inputs that trick a large...
Authentication Methods
System-Preferred Authentication for First and Second Factors
System-preferred authentication now applies to first-factor and second-factor sign-in when Microsoft managed settings are used.
App Security
App Deactivation: A safer pause button for risky or retired applications
App Deactivation lets admins stop new token issuance while preserving app registration metadata and configuration.
Enterprise Applications
App Deactivation: A safer pause button for risky or retired applications
App Deactivation lets admins stop new token issuance while preserving app registration metadata and configuration.
Microsoft Entra External ID
B2C to External ID Migration: HSC Mode
High Scale Compatibility mode is generally available for phased Azure AD B2C migrations to Microsoft Entra External ID.
Azure AD B2C
B2C to External ID Migration: HSC Mode
High Scale Compatibility mode is generally available for phased Azure AD B2C migrations to Microsoft Entra External ID.
CIAM
B2C to External ID Migration: HSC Mode
High Scale Compatibility mode is generally available for phased Azure AD B2C migrations to Microsoft Entra External ID.
Migration
B2C to External ID Migration: HSC Mode
High Scale Compatibility mode is generally available for phased Azure AD B2C migrations to Microsoft Entra External ID.
Cross-tenant Access
Cross-Tenant Group Synchronization
Cross-tenant group synchronization is generally available for synchronizing security groups and memberships across Entra tenants.
Group Management
Cross-Tenant Group Synchronization
Cross-tenant group synchronization is generally available for synchronizing security groups and memberships across Entra tenants.
Devices
Device soft delete in Microsoft Entra ID
Device soft delete moves deleted Entra device objects into a recoverable state instead of removing them immediately.
Endpoint security
Device soft delete in Microsoft Entra ID
Device soft delete moves deleted Entra device objects into a recoverable state instead of removing them immediately.
Recovery
Device soft delete in Microsoft Entra ID
Device soft delete moves deleted Entra device objects into a recoverable state instead of removing them immediately.
B2B
Domainless SAML federation
Domainless SAML federation lets external users sign in with their own IdP even when email domains do not map cleanly.
Azure RBAC
Govern Azure roles with access packages
Access packages can now govern active and eligible Azure RBAC assignments at key Azure scopes in Public Preview.
Least privilege
Govern Azure roles with access packages
Access packages can now govern active and eligible Azure RBAC assignments at key Azure scopes in Public Preview.
Windows Hello
Passkeys on Windows Hello: Familiar user experience, phishing-resistant sign-in
Passkeys on Windows Hello let users register device-bound FIDO2 credentials in the local Windows Hello container.
Linux
Phish-Resistant MFA for Linux Desktops
Microsoft single sign-on for Linux is generally available, bringing Entra registration, brokered SSO, and device-based controls to Linux desktops.
Phishing-resistant MFA
Phish-Resistant MFA for Linux Desktops
Microsoft single sign-on for Linux is generally available, bringing Entra registration, brokered SSO, and device-based controls to Linux desktops.
Intune
Phish-Resistant MFA for Linux Desktops
Microsoft single sign-on for Linux is generally available, bringing Entra registration, brokered SSO, and device-based controls to Linux desktops.
My Account
Redesigned My Account Pages: Easier Self-Service in Microsoft Entra
Modernized My Account pages are generally available, giving users clearer self-service paths for account and device tasks.
Security Info
Redesigned My Account Pages: Easier Self-Service in Microsoft Entra
Modernized My Account pages are generally available, giving users clearer self-service paths for account and device tasks.
BitLocker
Redesigned My Account Pages: Easier Self-Service in Microsoft Entra
Modernized My Account pages are generally available, giving users clearer self-service paths for account and device tasks.
Workload Identity
SAP SuccessFactors Provisioning Without Stored Passwords: Workload Identity Auth Hits Preview
SAP SuccessFactors HR provisioning can now use short-lived federated OIDC tokens instead of stored basic-auth passwords. Here’s how the Public Preview works.
SAP SuccessFactors
SAP SuccessFactors Provisioning Without Stored Passwords: Workload Identity Auth Hits Preview
SAP SuccessFactors HR provisioning can now use short-lived federated OIDC tokens instead of stored basic-auth passwords. Here’s how the Public Preview works.
Microsoft Purview
Sensitivity Labels for Security Groups: Purview Classification Meets Entra Access
Microsoft Entra now lets you apply Purview sensitivity labels to cloud security groups in public preview — here’s why it matters and how to test it.
Security groups
Sensitivity Labels for Security Groups: Purview Classification Meets Entra Access
Microsoft Entra now lets you apply Purview sensitivity labels to cloud security groups in public preview — here’s why it matters and how to test it.
Sensitivity labels
Sensitivity Labels for Security Groups: Purview Classification Meets Entra Access
Microsoft Entra now lets you apply Purview sensitivity labels to cloud security groups in public preview — here’s why it matters and how to test it.
Automation
User attribute updates in Lifecycle Workflows
Lifecycle Workflows can now test an Update user attributes task for joiner, mover, and leaver automation.
Attributes
User attribute updates in Lifecycle Workflows
Lifecycle Workflows can now test an Update user attributes task for joiner, mover, and leaver automation.
Social Sign-In
Social Identity Provider Support for Native Authentication is Generally Available
1 minute read
If you build customer-facing apps, you know the tension: users expect to sign in with the accounts they already have, but you don’t want to hand the whole ...