Entra security defaults
Observed content change
The page title or its body outside the tracked passages changed. Review the source for its effect.
Read to decideThe wording changed without matching a rule; read the changed passages to decide.
Read the current Microsoft source · Link to this observation · Compare any two versions
Observation details · observed 12 Oct 19:35 UTC
- Observed by ChangeIntel
- 12 Oct 19:35 UTC
- Source update metadata
- 1 Jul 17:34 UTC
- First observed on this installation
- 5 Oct 17:50 UTC
- Last successful check
- 25 Oct 22:10 UTC
- Next check due
- today 04:10 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.
This is an earlier observation; review the latest in My radar.
Timeline
From the capture of 12 Oct 19:35 UTC · an earlier observation- 3 dates
- 11 undated sections
- 12 with conditions
- 27 recorded changes
- Enforced by default1 Jul 2026 Now: On by default; an override or rollback still exists
- 7 years agoon or after
- 2 years agostarting
- Require all users to register for Microsoft Entra multifactor authenticationMilestoneScope1 condition
- 3 months agostartingEnforced by default
- Block device code flowMilestone
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
Revoke-MgUserSignInSession
Requirements, exceptions and scope
Revoke-MgUserSignInSession- Move from security defaults to Conditional AccessRequirementExceptionRecommendation1 condition3 passages
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
How this timeline changed
Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.
-
Starting July 1, 2026
-
No longer on the page Move from security defaults to Conditional AccessMicrosoft's source, commit 8c922f8
-
Recommendation added Move from security defaults to Conditional AccessMicrosoft's source, commit 8c922f8
-
Recommendation added Move from security defaults to Conditional AccessMicrosoft's source, commit 88fa8f7
-
No longer on the page Move from security defaults to Conditional AccessMicrosoft's source, commit 88fa8f7
-
No longer on the page Move from security defaults to Conditional AccessMicrosoft's source, commit a454cd9
-
Recommendation added Move from security defaults to Conditional AccessMicrosoft's source, commit a454cd9
-
-
-
-
15 earlier changes
-
-
-
-
New dated step Require all users to register for Microsoft Entra multifactor authenticationMicrosoft's source, commit f6b623dStarting July 29, 2024
-
No longer on the page Require all users to register for Microsoft Entra multifactor authenticationMicrosoft's source, commit f6b623d
Starting July 29, 2024 -
Recommendation added Move from security defaults to Conditional AccessMicrosoft's source, commit f6b623d
-
No longer on the page Move from security defaults to Conditional AccessMicrosoft's source, commit f6b623d
-
No longer on the page Move from security defaults to Conditional AccessMicrosoft's source, commit f6b623d
Observed history and review priority
Captured 12 Oct 19:35 UTC; extracted 22 Oct 18:57 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 17
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 23 Oct 09:22 UTC · 29 candidates
- 19 Oct 00:53 UTC · 29 candidates
- 16 Oct 03:33 UTC · 26 candidates
- 14 Oct 16:35 UTC · 43 candidates
- 12 Oct 19:35 UTC · 29 candidates
- 6 Oct 17:57 UTC · 30 candidates
- 5 Oct 17:50 UTC · 30 candidates
- 30 Jun 23:52 UTC · 26 candidates
- 17 Jun 19:27 UTC · 25 candidates
- 15 Jun 16:45 UTC · 25 candidates
- 20 May 18:19 UTC · 25 candidates
- 15 May 23:34 UTC · 25 candidates
- 30 Apr 16:23 UTC · 24 candidates
- 26 Jan 21:08 UTC · 24 candidates
- 26 Jan 19:34 UTC · 24 candidates
- 21 Jul 2025 18:24 UTC · 23 candidates
- 25 Apr 2025 18:32 UTC · 26 candidates
Microsoft's edits
History on GitHubCommits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:18 UTC.
Retained observations
- 23 Oct 09:22 UTC
Source metadata changed; retained article content is unchanged.
- 19 Oct 00:53 UTC
Source metadata changed; retained article content is unchanged.
- 12 Oct 19:35 UTC · shown above
- 6 Oct 17:57 UTC
Source metadata changed; retained article content is unchanged.
- 5 Oct 17:50 UTC
Baseline for retained history; no earlier retained text to compare.
What changed
First observed 18 Oct 2026No field changes are shown for this selection.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.