Entra security defaults

Timeline

From the capture of 5 Oct 17:50 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

30 recorded changes

Microsoft's revision log on this page · 28 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

Security defaults in Microsoft Entra IDRequirement1 condition
Security defaults in Microsoft Entra IDRequirement1 condition
Who should use Conditional Access?Recommendation
Who should use Conditional Access?Recommendation1 condition
Who should use Conditional Access?Recommendation1 condition
on or after October 22, 2019Enabling security defaultsMilestone1 condition
Enabling security defaultsRequirement
Enabling security defaultsRequirement
Revoking active tokensScopeRecommendation1 condition
Revoke-MgUserSignInSession
Starting July 29, 2024Require all users to register for Microsoft Entra multifactor authenticationMilestoneScope1 condition
Require administrators to do multifactor authenticationRequirement1 condition
Require users to do multifactor authentication when necessaryException2 conditions
Require users to do multifactor authentication when necessaryScope3 conditions
Require users to do multifactor authentication when necessaryScope1 condition
Block legacy authentication protocolsScope
Block device code flowRecommendation1 condition
Starting July 1, 2026Block device code flowMilestone
Protect privileged activities like access to the Azure portalScope
Protect privileged activities like access to the Azure portalRequirement
Protect privileged activities like access to the Azure portalScope
Protect privileged activities like access to the Azure portalRequirement
Protect privileged activities like access to the Azure portalScope
Authentication methodsRequirementException1 condition
Disabling security defaultsRequirement
Disabling security defaultsRecommendation
Move from security defaults to Conditional AccessRequirement
Move from security defaults to Conditional AccessRecommendation
Move from security defaults to Conditional AccessExceptionRecommendation1 condition

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

1 Jul 2026
Microsoft logged an update Block device code flowMicrosoft's change log
30 Jun 2026
New dated step Block device code flow Microsoft's source, commit 7ff9e4f
Starting July 1, 2026
17 Jun 2026
No longer on the page Move from security defaults to Conditional Access Microsoft's source, commit 8c922f8
17 Jun 2026
Recommendation added Move from security defaults to Conditional Access Microsoft's source, commit 8c922f8
15 Jun 2026
Recommendation added Move from security defaults to Conditional Access Microsoft's source, commit 88fa8f7
15 Jun 2026
No longer on the page Move from security defaults to Conditional Access Microsoft's source, commit 88fa8f7
20 May 2026
No longer on the page Move from security defaults to Conditional Access Microsoft's source, commit a454cd9
20 May 2026
Recommendation added Move from security defaults to Conditional Access Microsoft's source, commit a454cd9
15 May 2026
Recommendation added Block device code flow Microsoft's source, commit cdac7c8
30 Apr 2026
No longer on the page Revoking active tokens Microsoft's source, commit 48d08ec
30 Apr 2026
Scope added Revoking active tokens Microsoft's source, commit 48d08ec
26 Jan 2026
No longer on the page Enabling security defaults Microsoft's source, commit 32061e2

18 earlier changes

26 Jan 2026
Requirement added Enabling security defaults Microsoft's source, commit 32061e2
26 Jan 2026
Requirement added Enabling security defaults Microsoft's source, commit ab2b9a6
21 Jul 2025
No longer on the page Authentication methods Microsoft's source, commit f6b623d
21 Jul 2025
Requirement added Authentication methods Microsoft's source, commit f6b623d
21 Jul 2025
New dated step Require all users to register for Microsoft Entra multifactor authentication Microsoft's source, commit f6b623d
Starting July 29, 2024
21 Jul 2025
No longer on the page Require all users to register for Microsoft Entra multifactor authentication Microsoft's source, commit f6b623d
~~Starting July 29, 2024~~
21 Jul 2025
Recommendation added Move from security defaults to Conditional Access Microsoft's source, commit f6b623d
21 Jul 2025
No longer on the page Move from security defaults to Conditional Access Microsoft's source, commit f6b623d
21 Jul 2025
No longer on the page Move from security defaults to Conditional Access Microsoft's source, commit f6b623d
21 Jul 2025
No longer on the page Protect privileged activities like access to the Azure portal Microsoft's source, commit f6b623d
21 Jul 2025
No longer on the page Require administrators to do multifactor authentication Microsoft's source, commit f6b623d
21 Jul 2025
Requirement added Protect privileged activities like access to the Azure portal Microsoft's source, commit f6b623d
21 Jul 2025
No longer on the page Protect privileged activities like access to the Azure portal Microsoft's source, commit f6b623d
21 Jul 2025
Scope added Protect privileged activities like access to the Azure portal Microsoft's source, commit f6b623d
21 Jul 2025
No longer on the page Require users to do multifactor authentication when necessary Microsoft's source, commit f6b623d
21 Jul 2025
Scope added Require users to do multifactor authentication when necessary Microsoft's source, commit f6b623d
29 Jul 2024
Microsoft logged an update Require all users to register for Microsoft Entra multifactor authenticationMicrosoft's change log
22 Oct 2019
Microsoft logged an update Enabling security defaultsMicrosoft's change log

Observed history and review priority

Captured 5 Oct 17:50 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 16

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

19 Oct 00:53 UTC · 29 candidates
16 Oct 03:33 UTC · 26 candidates
14 Oct 16:35 UTC · 43 candidates
12 Oct 19:35 UTC · 29 candidates
6 Oct 17:57 UTC · 32 candidates
5 Oct 17:50 UTC · 32 candidates
30 Jun 23:52 UTC · 26 candidates
17 Jun 19:27 UTC · 25 candidates
15 Jun 16:45 UTC · 25 candidates
20 May 18:19 UTC · 25 candidates
15 May 23:34 UTC · 25 candidates
30 Apr 16:23 UTC · 24 candidates
26 Jan 21:08 UTC · 24 candidates
26 Jan 19:34 UTC · 24 candidates
21 Jul 2025 18:24 UTC · 23 candidates
25 Apr 2025 18:32 UTC · 26 candidates