Entra security defaults
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 7ff9e4f · +4 −0 lines · also on GitHub
⋯ 136 unchanged lines
137137
After security defaults are enabled in your tenant, authentication requests that use device code flow are blocked. Applications or devices that depend on device code flow won't be able to complete sign-in while security defaults are enabled.
138138
If your organization needs granular control and exceptions, you should consider [Conditional Access](/entra/identity/conditional-access/concept-conditional-access-policy-common).
139139
140
+> [!NOTE]
141
+> Starting July 1, 2026, all new Microsoft Entra tenants block device code flow as part of security defaults. Applications or devices that depend on device code flow won't be able to complete sign-in while security defaults are enabled.
142
+
143
+
140144
### Protect privileged activities like access to the Azure portal
141145
142146
Organizations use various Azure services managed through the Azure Resource Manager API, including:
⋯ 81 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:30 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.