Known issues
What Microsoft lists as broken, worked around, or changing in a way that breaks things: Windows release health, Office, Microsoft Graph, SQL Server and Exchange Server updates, and the identity platform. Status is shown as Microsoft publishes it, and ChangeIntel notes when Microsoft revises an entry.
Identity-platform announcements
source checked 1d ago- Identity-platform authentication changes · announced · Entra
Effective date: September 2024 Protocol impacted: Workload identity federation Change Previously, when matching the Federated Identity Credential (FIC) issuer, subject, and audience values against the corresponding issuer, subject, and…
- Identity-platform authentication changes · announced · Entra
Effective date: June 2024 Endpoints impacted: v2.0 and v1.0 Protocol impacted: All flows Change Previously, when registering an application using the Microsoft Entra app registrations experience, if the user was signed in with their…
- Identity-platform authentication changes · announced · Entra
Effective date: October 2023 Endpoints impacted: v2.0 and v1.0 Protocol impacted: RemoteConnect RemoteConnect is a cross-device flow that is used for Microsoft Authentication Broker and Microsoft Intune related scenarios involving Primary…
- Identity-platform authentication changes · announced · Entra
Effective date: June 2023 Endpoints impacted: v2.0 and v1.0 Change For multi-tenant applications, emails that aren't domain-owner verified are omitted by default when the optional email claim is requested in a token payload. An email is…
- Identity-platform authentication changes · announced · Entra
Effective date: June 2023 Endpoints impacted: List roleDefinitions - Microsoft Graph v1.0 List directoryRoles - Microsoft Graph v1.0 Change The Power BI Administrator role is renamed to Fabric Administrator. On May 23, 2023, Microsoft…
- Identity-platform authentication changes · announced · Entra
Effective date: December 2021 Endpoints impacted: Integrated Windows Authentication Protocol impacted: Integrated Windows Authentication Change Today, when a user is sent to AD FS to authenticate, they'll be silently signed into any…
- Identity-platform authentication changes · announced · Entra
Effective date: October 2021 Endpoints impacted: v2.0 and v1.0 Protocol impacted: All flows Change For single tenant applications, adding or updating the AppId URI validates that the domain in the HTTPS scheme URI is listed in the…
- Identity-platform authentication changes · announced · Entra
Effective date: October 2021 Endpoints impacted: v2.0 and v1.0 Protocol impacted: All user flows for apps requiring user assignment Change Error 50105 (the current designation) is emitted when an unassigned user attempts to sign into an…
- Identity-platform authentication changes · announced · Entra
Effective date: August 2021, with gradual rollout starting in April. Endpoints impacted: v2.0 Protocol impacted: All flows using dynamic consent Applications using dynamic consent today are given all the permissions they have consent for…
- Identity-platform authentication changes · announced · Entra
Effective date: June 2021. Endpoints impacted: v2.0 and v1.0 Protocol impacted: The device code flow To help prevent phishing attacks, the device code flow now includes a prompt that validates the user is signing into the app they expect…
- Identity-platform authentication changes · announced · Entra
Effective date: May 5, 2020 (Finishing June 2020) Endpoints impacted: All Protocol impacted: All flows On 1 June 2018, the official Microsoft Entra Authority for Azure Government changed from https://login-us.microsoftonline.com to…
- Identity-platform authentication changes · announced · Entra
Effective date: May 2021 Endpoints impacted: v1.0 and v2.0 Protocol impacted: All flows that visit the /authorize endpoint (implicit flow and authorization code flow) A bug was found and fixed in the Microsoft Entra authorization…
- Identity-platform authentication changes · announced · Entra
Effective date: March 13, 2020 Endpoints impacted: All Protocol impacted: All user flows. Users with passwords longer than 256 characters who sign in directly to Microsoft Entra ID (not a federated IDP, like AD FS) will be asked to change…
- Identity-platform authentication changes · announced · Entra
Effective date: February 8, 2020 Endpoints impacted: Both v1.0 and v2.0 Protocol impacted: OAuth and OIDC flows that use response_type=query - this covers the authorization code flow in some cases, and the implicit flow. When an…
- Identity-platform authentication changes · announced · Entra
Effective date: September 2, 2019 Endpoints impacted: Both v1.0 and v2.0 Protocol impacted: Anywhere POST is used (client credentials, authorization code redemption, ROPC, OBO, and refresh token redemption) Beginning the week of September…
- App-only tokens for single-tenant applications are only issued if the client app exists in the resource tenantIdentity-platform authentication changes · announced · Entra
Effective date: July 26, 2019 Endpoints impacted: Both v1.0 and v2.0 Protocol impacted: Client Credentials (app-only tokens) A security change took effect on July 26, 2019 changing the way app-only tokens (via the client credentials…
- Identity-platform authentication changes · announced · Entra
Effective date: July 22, 2019 Endpoints impacted: Both v1.0 and v2.0 Protocol impacted: All flows Per RFC 6749, Microsoft Entra applications can now register and use redirect (reply) URIs with static query parameters (such as…
- Identity-platform authentication changes · announced · Entra
Effective date: March 25, 2019 Endpoints impacted: Both v1.0 and v2.0 Protocol impacted: All flows Client applications can sometimes misbehave, issuing hundreds of the same login request over a short period of time. These requests may or…
- Identity-platform authentication changes · announced · Entra
Effective date: November 15, 2018 Endpoints impacted: Both v1.0 and v2.0 Protocol impacted: Code flow Starting on November 15, 2018, Microsoft Entra ID will stop accepting previously used authentication codes for apps. This security…
- Identity-platform authentication changes · announced · Entra
Date: May 1, 2018 Endpoints impacted: Both v1.0 and v2.0 Protocols impacted: Implicit flow and on-behalf-of flow After May 1, 2018, id_tokens can't be used as the assertion in an OBO flow for new applications. Access tokens should be used…