MODIFIED docs/identity/app-provisioning/how-to-account-discovery.md

Modified by ArvindHarinder1 on Apr 16, 2026 6:06 PM
📖 View on learn.microsoft.com

+5 / -4 lines changed

Commit: Update how-to-account-discovery.md

Changes:

Before

After

title: Discover identities in target applications with Account Discovery (preview)
description: Learn how to use Account Discovery to find and categorize existing user accounts in target applications, match them to Microsoft Entra ID users, and prepare for provisioning governance.
ms.topic: how-to
ms.date: 04/15/2026
ms.author: jfields
author: jenniferf-skc
ms.reviewer: arvinh
 
Customers using account discovery with the following applications consistently receive complete discovery results:
 
- SAP Cloud Identity Services  
- Salesforce  
- Atlassian Cloud  
 
### Connectors that do not support discovery
Account Discovery is currently unsupported for the following applications:
 
- HR provisioning (Workday, SAP SuccessFactors, API-driven provisioning)
- ServiceNow  
- Amazon Web Services (AWS)  

title: Discover identities in target applications with Account Discovery (preview)
description: Learn how to use Account Discovery to find and categorize existing user accounts in target applications, match them to Microsoft Entra ID users, and prepare for provisioning governance.
ms.topic: how-to
ms.date: 04/16/2026
ms.author: jfields
author: jenniferf-skc
ms.reviewer: arvinh
 
Customers using account discovery with the following applications consistently receive complete discovery results:
 
- Atlassian Cloud  
- Salesforce  
- SAP Cloud Identity Services  
 
### Connectors that do not support discovery
Account Discovery is currently unsupported for the following applications:
 
- HR provisioning (Workday, SAP SuccessFactors, API-driven provisioning)
- ServiceNow  
- Amazon Web Services (AWS)

MODIFIED docs/identity/enterprise-apps/v2-howto-app-gallery-listing.md

Modified by Jeevan Desarda on Apr 16, 2026 3:55 PM
📖 View on learn.microsoft.com

+3 / -1 lines changed

Commit: Update docs/identity/enterprise-apps/v2-howto-app-gallery-listing.md

Changes:

Before

After

### Checklist for applications supporting SSO
Here's the quick checklist for you before you submit the application request to list your application in Microsoft Entra App Gallery.
 
#### SAML Single sign-on application requirements:
 
#### Authentication Requirements: 
- Application should support SAML 2.0 Protocol either in Service Provider initiated mode or Identity Provider Initiated (IDP) mode or both (Required)

### Checklist for applications supporting SSO
Here's the quick checklist for you before you submit the application request to list your application in Microsoft Entra App Gallery.
 
#### SAML single sign-on application requirements
 
The following requirements apply to SAML-based SSO applications.
 
#### Authentication Requirements: 
- Application should support SAML 2.0 Protocol either in Service Provider initiated mode or Identity Provider Initiated (IDP) mode or both (Required)

MODIFIED docs/global-secure-access/concept-external-user-access.md

Modified by cagautham on Apr 16, 2026 11:14 AM
📖 View on learn.microsoft.com

+2 / -2 lines changed

Commit: Add link to Microsoft Product Terms for External User definition

Changes:

Before

After

**Q: Is this feature supported from a windows Entra registered device(BYOD)?**   
A: Yes, you can use a windows device which is registered to Entra for switching to resource tenant.
 
**Q: What is the definition of an External User?**
A: The definition of an External User is provided in the Microsoft Product Terms. Refer to the official Product Terms glossary and search for “External Users” for the most up‑to‑date definition.
 
## Traffic logs visibility
 

**Q: Is this feature supported from a windows Entra registered device(BYOD)?**   
A: Yes, you can use a windows device which is registered to Entra for switching to resource tenant.
 
**Q: What is the definition of an External User?**    
A: The definition of an External User is provided in the [Microsoft Product Terms](https://www.microsoft.com/licensing/terms/product/Glossary). Refer to the official Product Terms glossary and search for “External Users” for the most up‑to‑date definition.
 
## Traffic logs visibility
 

MODIFIED docs/identity/enterprise-apps/configure-app-management-policies.md

Modified by aricrowe57 on Apr 16, 2026 4:03 PM
📖 View on learn.microsoft.com

+3 / -0 lines changed

Commit: Update configure-app-management-policies.md

Changes:

Before

After

- [Attribute Definition Administrator](/entra/identity/role-based-access-control/permissions-reference#attribute-definition-administrator)
- [Attribute Assignment Administrator](/entra/identity/role-based-access-control/permissions-reference#attribute-assignment-administrator)
 
This example grants a service an exception to the restriction enforcing a max lifetime on new certificates it adds to other applications and service principals. The service will be represented by its service principal. Find the service principal for a service by searching for it in [Enterprise applications](https://entra.microsoft.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AppAppsPreview).
 
#### [Microsoft Entra admin center](#tab/portal)

- [Attribute Definition Administrator](/entra/identity/role-based-access-control/permissions-reference#attribute-definition-administrator)
- [Attribute Assignment Administrator](/entra/identity/role-based-access-control/permissions-reference#attribute-assignment-administrator)
 
> [!NOTE]
> If you assign a caller-based exemption to a user, that user still may not be able to use the Entra admin center or Azure portal to modify applications in a way that violates the policy unless they have the [attribute assignment reader role](https://learn.microsoft.com/entra/identity/role-based-access-control/permissions-reference#attribute-assignment-reader).  This isn't required for other app management interfaces, like Microsoft Graph or Powershell.
 
This example grants a service an exception to the restriction enforcing a max lifetime on new certificates it adds to other applications and service principals. The service will be represented by its service principal. Find the service principal for a service by searching for it in [Enterprise applications](https://entra.microsoft.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AppAppsPreview).
 
#### [Microsoft Entra admin center](#tab/portal)

MODIFIED docs/global-secure-access/how-to-application-discovery.md

Modified by jenniferf-skc on Apr 16, 2026 8:04 PM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: Updating date

Changes:

Before

After

title: Application Discovery for Global Secure Access
description: Use Application discovery to detect the applications accessed by users and create separate private applications.
ms.topic: how-to
ms.date: 03/17/2026
ms.author: jayrusso
author: HULKsmashGithub
ms.reviewer: lirazbarak

title: Application Discovery for Global Secure Access
description: Use Application discovery to detect the applications accessed by users and create separate private applications.
ms.topic: how-to
ms.date: 04/16/2026
ms.author: jayrusso
author: HULKsmashGithub
ms.reviewer: lirazbarak

📋 Microsoft Entra Documentation Changes

📊 Summary

📝 Modified Documentation Files