Authentication changes
Timelines and exceptionsTimeline
From the capture of 12 Oct 19:19 UTC- 13 dates
- 16 undated sections
- 42 with conditions
- 32 recorded changes
- Enforced15 Nov 2018 Now: Enforced; the override no longer helps
- Enforced2 Sep 2019 Published timing is qualified; effectiveness is not confirmed.
- EnforcedJune 2020 Published timing is qualified; effectiveness is not confirmed.
- Enforced by defaultOctober 2021 Published timing is qualified; effectiveness is not confirmed.
- Enforced by defaultafter 15 Oct 2021 Published timing is qualified; effectiveness is not confirmed.
- 8 years agoafterbefore
- ID tokens can't be used for the OBO flowRecommendation
- 8 years ago
- 7 years agoEnforced
- 7 years ago
- App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenantMilestoneRequirementExceptionScopeRecommendationTentative4 conditions
- 7 years agoEnforced · unconfirmed
- POST form semantics will be enforced more strictly - spaces and quotes will be ignoredMilestoneRequirementExceptionScopeTentative
- 6 years ago
- 6 years agomonth windowEnforced · unconfirmed
- 5 years agomonth window
- 5 years agomonth window
- 4 years agomonth windowEnforced by default · unconfirmed
- 5 years agoafterEnforced by default · unconfirmed
- AppId Uri in single tenant applications will require use of default scheme or verified domainsMilestoneExceptionScope4 conditions
- 3 years agomonth windowstarting
- 2 years agomonth windowstarting
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
AcquireTokenByAuthorizationCodeAsyncAcquireTokenSilentAsyncWS-Fed
Requirements, exceptions and scope
Unless otherwise noted, the changes described here apply only to applications registered after the stated effective date of the change.…
- Federated Identity Credentials now use case-sensitive matchingRequirementExceptionRecommendation4 conditions3 passages
This change will be applied…
WS-Fed- AD FS users will see more login prompts to ensure that the correct user is signed in.Scope2 conditions1 passage
- Error 50105 has been fixed to not return interaction_required during interactive authenticationRequirementException2 conditions2 passages
- AppId Uri in single tenant applications will require use of default scheme or verified domainsRequirementException8 conditions5 passages
- Conditional Access will only trigger for explicitly requested scopesRequirementExceptionScope20 conditions10 passages
- Bug fix: Microsoft Entra ID will no longer URL-encode the state parameter twiceRequirement4 passages
- Empty fragments will be appended to every HTTP redirect from the login endpoint.ScopeRecommendation1 condition1 passage
- App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenantException7 conditions5 passages
AcquireTokenByAuthorizationCodeAsyncAcquireTokenSilentAsync
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
-
starting June 2024
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit 9db9784
starting June 2024
20 earlier changes
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit 9db9784
-
No longer on the page The Power BI administrator role will be renamed to Fabric Administrator.Microsoft's source, commit da21d7c
Starting June 2023 -
New dated step The Power BI administrator role will be renamed to Fabric Administrator.Microsoft's source, commit da21d7cStarting June 2023
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
Observed history and review priority
Captured 12 Oct 19:19 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.
Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Publisher marks guidance tentative · Applicability or exceptions require review
0 date changes and 0 condition changes across 1 compared revisions. Suggested check interval: 6 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 21
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 12 Oct 19:19 UTC · 92 candidates
- 6 Oct 17:27 UTC · 101 candidates
- 5 Oct 17:20 UTC · 101 candidates
- 25 Aug 22:26 UTC · 69 candidates
- 23 Jun 01:10 UTC · 69 candidates
- 11 Jun 16:48 UTC · 69 candidates
- 1 Oct 2025 13:18 UTC · 69 candidates
- 29 Sep 2025 21:17 UTC · 69 candidates
- 15 Sep 2025 17:57 UTC · 69 candidates
- 8 Sep 2025 17:30 UTC · 69 candidates
- 27 Aug 2025 20:54 UTC · 69 candidates
- 21 Jul 2025 16:27 UTC · 69 candidates
- 14 May 2025 09:40 UTC · 69 candidates
- 5 Mar 2025 21:13 UTC · 69 candidates
- 21 Oct 2024 19:29 UTC · 69 candidates
- 21 Oct 2024 15:07 UTC · 68 candidates
- 10 Oct 2024 20:46 UTC · 68 candidates
- 10 Oct 2024 20:43 UTC · 68 candidates
- 10 Oct 2024 20:39 UTC · 68 candidates
- 10 Oct 2024 18:59 UTC · 68 candidates
- 29 Aug 2024 00:02 UTC · 67 candidates