Authentication changes

ID tokens can't be used for the OBO flow

1 May 2018 or later

Azure Government endpoints are changing

1 Jun 2018, conditional

Authorization codes can no longer be reused

15 Nov 2018 · Enforced

App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenant

26 Jul 2019, tentative, conditional

POST form semantics will be enforced more strictly - spaces and quotes will be ignored

2 Sep 2019 · Enforced, tentative

Azure Government endpoints are changing (2)

5 May 2020, conditional

Azure Government endpoints are changing (3)

June 2020 · Enforced, tentative

Bug fix: Microsoft Entra ID will no longer URL-encode the state parameter twice

May 2021

Conditional Access will only trigger for explicitly requested scopes

August 2021, conditional

AppId Uri in single tenant applications will require use of default scheme or verified domains

October 2021 · Enforced by default, conditional

AppId Uri in single tenant applications will require use of default scheme or verified domains (2)

15 Oct 2021 or later · Enforced by default, conditional

The Power BI administrator role will be renamed to Fabric Administrator.

June 2023

Applications must be registered in a directory

June 2024, conditional

Settings named

AcquireTokenByAuthorizationCodeAsync, AcquireTokenSilentAsync, WS-Fed

• Microsoft's page
• Timelines and exceptions

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.