Entra changes

Source history: extracted from the page's source file at a commit; shared includes are not expanded

1. Audit / monitorApril 2026 Published timing is qualified; effectiveness is not confirmed.
2. Enforced1 Jun 2026 Enforced; the override no longer helps
3. Enforced1 Jul 2026 Now: Enforced; the override no longer helps
4. AnnouncedNovember 2026 Published timing is qualified; effectiveness is not confirmed.

1. February 2026 7 months agomonth windowstarting
   • Upcoming Changes - Jailbreak Detection in Authenticator AppMilestoneRequirement
2. April 2026 5 months agomonth windowAudit / monitor · unconfirmed
   • General Availability – Improved readability for Authentication Methods Policy Update audit logsMilestoneException2 conditions
3. May 2026 4 months agomonth windowstarting
   • What's changingMilestone
4. 1 Jun 2026 4 months agobeginningEnforced
   • Upcoming change – Microsoft Entra Connect security update to block hard match for users with Microsoft Entra rolesScope
5. 1 Jul 2026 3 months agoEnforced
   • General Availability - Microsoft Entra Connect security hardening to prevent user account takeoverMilestone
6. July 2026 2 months agomonth window
   • What's nextMilestone1 condition
7. Today · 21 Oct 2026
8. November 2026 in 11 daysmonth windowbeforeAnnounced · unconfirmed
   • Public Preview - Workload identity-based authentication for SAP SuccessFactors provisioning integrationsRequirement1 condition
   • What this means for youRequirement1 condition

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

• OnPremisesImmutableId
• OnPremisesObjectIdentifier
• User-OnPremisesSyncBehavior

Requirements, exceptions and scope

• Public Preview - Enable soft-delete for Microsoft Entra Device objectsException1 passage
• General Availability - NetBiosName resolution test now informationalRequirementException5 conditions3 passages
• Upcoming change - Enhanced admin authorization for Microsoft Entra Connect Sync configuration changesRequirementException3 conditions3 passages
• Public Preview - Workload identity-based authentication for SAP SuccessFactors provisioning integrationsRequirementScopeRecommendation5 passages
• General Availability - Account DiscoveryExceptionScope1 passage
• General Availability - Cross tenant group synchronizationRequirementScope1 condition1 passage
• Public Preview - Automate setting or clearing user attributes values in Lifecycle workflowsExceptionScope1 passage
• General Availability - System-preferred authentication expanded to first-factor in Microsoft Entra IDException1 condition1 passage
• General Availability - High Scale Compatibility (HSC) mode for Microsoft Entra External IDScope1 passage
• Expanded policy storage for passkeys (FIDO2) in Microsoft Entra IDScope1 passage
• Public Preview - Account DiscoveryExceptionScope1 passage
• Public Preview - App-based branding via Branding themes in Microsoft Entra tenantsScope1 passage
• What's not changingRequirement1 passage
• What is changingRequirementScope2 passages
• Why this is changingScope1 passage
• Action required from customersRequirementScope2 conditions4 passages
• What's changingScope2 passages
• What this means for youRequirementRecommendation1 passage
• Recommended actionScopeRecommendation3 passages
• General Availability - GSA iOS client supportRequirementScope1 condition1 passage
• General Availability - Entra CBA Certificate Authority (CA) scopingException1 condition1 passage
• Plan for change – Agent Registry consolidation into Microsoft Agent 365RequirementExceptionScope2 passages
• Public Preview - Microsoft Entra Backup and Recovery is now availableScope1 passage
• Public Preview - Passkey Adoption Campaigns with the Conditional Access Optimization AgentRequirementRecommendation1 passage
• General Availability - Just‑in‑Time Password Migration in Microsoft Entra External IDScope1 passage
• Upcoming change – Microsoft Entra Connect security update to block hard match for users with Microsoft Entra rolesRequirementScope3 conditions3 passages
  OnPremisesImmutableId
• General Availability - Microsoft Entra Connect Sync now supports Windows Server 2025Recommendation2 conditions1 passage
• General Availability - Ability to convert Source of Authority of synced on-premises AD users to cloud users is now availableRequirementException1 passage
• General Availability - Microsoft Entra ID Governance guest billing meter enforcementRequirement1 condition1 passage
• General Availability - Microsoft Entra Connect security hardening to prevent user account takeoverRequirementExceptionScopeRecommendation5 conditions11 passages
  OnPremisesImmutableIdOnPremisesObjectIdentifierUser-OnPremisesSyncBehavior
• Public Preview - Just-in-time password migration to Microsoft Entra External IDException1 condition1 passage
• Public Preview - Soft Deletion for Cloud Security GroupsException1 condition1 passage
• Public Preview - User centric access reviews including disconnected applicationsScope1 passage
• Public preview - Microsoft Entra ID with Entra Kerberos has added support for cloud‑only identitiesException1 condition1 passage
• Public Preview - Unified Entra App GalleryExceptionScope2 passages

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.