Authentication changes
Retained observation
Source metadata changed; retained article content is unchanged.
Read the current Microsoft source · Link to this observation · Compare any two versions
Observation details · observed 6 Oct 17:27 UTC
- Observed by ChangeIntel
- 6 Oct 17:27 UTC
- Source update metadata
- 26 Aug 07:34 UTC
- First observed on this installation
- 5 Oct 17:20 UTC
- Last successful check
- today 19:44 UTC
- Next check due
- 21 Oct 01:44 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
This is an earlier observation; review the latest in My radar.
Timeline
From the capture of 6 Oct 17:27 UTC · an earlier observationLegacy capture: table structure or oversized sections are unavailable for extraction
Microsoft's revision log on this page · 76 entries
Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.
- June 2024Applications must be registered in a directoryRequirement
- starting June 2024Applications must be registered in a directoryMilestoneRequirementExceptionScope1 condition
- Omission of email claims with an unverified domain ownerRecommendation
WS-Fed - Starting June 2023The Power BI administrator role will be renamed to Fabric Administrator.MilestoneScope
- October 2021AppId Uri in single tenant applications will require use of default scheme or verified domainsMilestone1 condition
- after October 15, 2021 · October 15, 2021AppId Uri in single tenant applications will require use of default scheme or verified domainsMilestoneExceptionScope4 conditions
- AppId Uri in single tenant applications will require use of default scheme or verified domainsRequirementException1 condition
- August 2021Conditional Access will only trigger for explicitly requested scopesMilestoneException1 condition
- Conditional Access will only trigger for explicitly requested scopesRequirementException2 conditions
- Empty fragments will be appended to every HTTP redirect from the login endpoint.ScopeRecommendation1 condition
- September 2, 2019POST form semantics will be enforced more strictly - spaces and quotes will be ignoredMilestoneRequirementExceptionScopeTentative
- July 26, 2019App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenantException1 condition
- July 26, 2019App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenantMilestoneRequirementExceptionScopeRecommendationTentative3 conditions
- Looping clients will be interruptedRecommendation
- Looping clients will be interruptedRecommendation
- Authorization codes can no longer be reusedRequirement
- November 15, 2018Authorization codes can no longer be reusedRequirement
- Authorization codes can no longer be reusedRequirement
- Authorization codes can no longer be reusedRequirement
AcquireTokenByAuthorizationCodeAsyncAcquireTokenSilentAsync- After May 1, 2018 · before May 1, 2018ID tokens can't be used for the OBO flowRecommendation
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
-
starting June 2024
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit 9db9784
starting June 2024
36 earlier changes
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit 9db9784
-
No longer on the page The Power BI administrator role will be renamed to Fabric Administrator.Microsoft's source, commit da21d7c
Starting June 2023 -
New dated step The Power BI administrator role will be renamed to Fabric Administrator.Microsoft's source, commit da21d7cStarting June 2023
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
-
No longer on the page Applications must be registered in a directoryMicrosoft's source, commit efca60d
-
-
-
Microsoft logged an update The Power BI administrator role will be renamed to Fabric Administrator.Microsoft's change log
-
Microsoft logged an addition AppId Uri in single tenant applications will require use of default scheme or verified domainsMicrosoft's change log
-
Microsoft logged an update AppId Uri in single tenant applications will require use of default scheme or verified domainsMicrosoft's change log
-
Microsoft logged an update Conditional Access will only trigger for explicitly requested scopesMicrosoft's change log
-
Microsoft logged an update Bug fix: Microsoft Entra ID will no longer URL-encode the state parameter twiceMicrosoft's change log
-
-
-
Microsoft logged an update POST form semantics will be enforced more strictly - spaces and quotes will be ignoredMicrosoft's change log
-
Microsoft logged an update App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenantMicrosoft's change log
-
Microsoft logged an update App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenantMicrosoft's change log
-
-
-
-
Observed history and review priority
Captured 6 Oct 17:27 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 21
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 12 Oct 19:19 UTC · 92 candidates
- 6 Oct 17:27 UTC · 101 candidates
- 5 Oct 17:20 UTC · 101 candidates
- 25 Aug 22:26 UTC · 69 candidates
- 23 Jun 01:10 UTC · 69 candidates
- 11 Jun 16:48 UTC · 69 candidates
- 1 Oct 2025 13:18 UTC · 69 candidates
- 29 Sep 2025 21:17 UTC · 69 candidates
- 15 Sep 2025 17:57 UTC · 69 candidates
- 8 Sep 2025 17:30 UTC · 69 candidates
- 27 Aug 2025 20:54 UTC · 69 candidates
- 21 Jul 2025 16:27 UTC · 69 candidates
- 14 May 2025 09:40 UTC · 69 candidates
- 5 Mar 2025 21:13 UTC · 69 candidates
- 21 Oct 2024 19:29 UTC · 69 candidates
- 21 Oct 2024 15:07 UTC · 68 candidates
- 10 Oct 2024 20:46 UTC · 68 candidates
- 10 Oct 2024 20:43 UTC · 68 candidates
- 10 Oct 2024 20:39 UTC · 68 candidates
- 10 Oct 2024 18:59 UTC · 68 candidates
- 29 Aug 2024 00:02 UTC · 67 candidates
Microsoft's edits
History on GitHubCommits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read 19 Oct 23:24 UTC.
Related public evidence
No related evidence found in this installation's recent collection. This does not establish that no announcement exists.
Retained observations
- 12 Oct 19:19 UTC
8 removed passages (about 50 words). The changed wording mentions prerequisites. Review the source to confirm the effect.
- 6 Oct 17:27 UTC · shown above
- 5 Oct 17:20 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.