Secure Generative Ai
UpdatedMicrosoft Entra offers a comprehensive suite of capabilities to securely manage AI applications, appropriately control access, and protect sensitive data:
Day in brief
Government-cloud availability and cross-cloud synchronization guidance were clarified; five Entra permissions guides were removed
22 June was primarily a Microsoft Learn maintenance day: 19 pages were updated and five were removed, with no new items or Message Center notices recorded. The most substantive edits document government-cloud coverage for Microsoft Entra ID Governance and Workload Identities Premium, describe cross-cloud synchronization between commercial and government clouds, and update application-security guidance. The removals are documentation retirements, not evidence that an Entra capability was retired; the supplied material identifies no new feature, preview, GA milestone, or tenant behavior change.
- Availability documentation covers ID Governance and Workload Identities Premium in US government clouds
ID Governance · AuthenticationThe updated Feature Availability page states that Microsoft Entra ID Governance is available in GCC, GCC-High, and Department of Defense environments, and that Microsoft Entra Workload Identities Premium is available in US government clouds. This is an availability-reference clarification, not evidence of a new GA announcement or an availability change on this date.
- Cross-cloud synchronization guidance describes B2B provisioning between Microsoft clouds
External ID · ProvisioningThe updated Microsoft Entra External ID configuration article covers setting up cross-tenant synchronization in the admin center between clouds such as Azure commercial and Azure Government. It states that configured synchronization automatically provisions and de-provisions B2B users in the target tenant. The evidence describes setup and behavior; it does not announce a new feature or changed default.
- Five Permissions Manage Ops Guide pages were removed
Entra ID · ArchitectureThe Alerts, Intro, One, Two, and Three pages in the Entra permissions operations-guide set are recorded as Removed. This retires documentation pages, not the permissions capability itself. Administrators with links in runbooks or bookmarks should verify those references; the supplied record does not identify replacement pages.
- App-registration guidance emphasizes periodic security and health assessment
Entra ID · Microsoft identity platformThe updated Microsoft Entra ID Security Best Practices For App Registration page recommends periodic security and health assessments of applications and points readers to the Security Development Lifecycle. This is security guidance for application owners, not an announced new control, requirement, or configuration change.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
24 updates
Microsoft Entra ID
15 updatesA Microsoft Entra documentation page was updated: Permissions Manage Ops Guide Alerts.
A Microsoft Entra documentation page was updated: Permissions Manage Ops Guide Intro.
A Microsoft Entra documentation page was updated: Permissions Manage Ops Guide One.
A Microsoft Entra documentation page was updated: Permissions Manage Ops Guide Three.
A Microsoft Entra documentation page was updated: Permissions Manage Ops Guide Two.
author: justinha
:::image type="content" border="true" source="media/how-to-authentication-track-linkable-identifiers/search-token-id.png" alt-text="Screenshot of log line with linkable identifiers.":::
:::image type="content" border="false" source="./media/how-to-certificate-based-authentication/steps.png" alt-text="Diagram of the steps required to enable Microsoft Entra certificate-based authentication.":::
Delegate By Task
Updated> | Configure registration | [Authentication Policy Administrator](permissions-reference.md#authentication-policy-administrator) | |
author: MicrosoftGuyJFlo
author: MicrosoftGuyJFlo
Licensing
Updatedmanager: pmwongera
Connect Version History
Updated> [!IMPORTANT]
Because secure applications are essential to the organization, any downtime to them because of security issues can affect the business or some critical service that the business depends upon. So, it's important to allocate time and resources to ensure applications always stay in a healthy and secure state. Conduct a periodic security and health assessment of applications, much like a Security Threat Model assessment for code. For a broader perspective on security for organizations, see the [security development lifecycle (SDL)](https://www.microsoft.com/securityengineering/sdl).
Microsoft Entra ID Governance
2 updatesFeature Availability
Updated[Microsoft Entra ID Governance](~/id-governance/licensing-fundamentals.md) is available in the US Government community cloud (GCC), GCC-High, and Department of Defense cloud environments. [Microsoft Entra Workload Identities Premium edition](~/workload-id/workload-identities-faqs.md#is-the-workload-id-premium-plan-available-on-azure-government-clouds) is available in the US government clouds.
Whatis
Updated- **Microsoft Entra ID Governance.** [Microsoft Entra ID Governance](~/id-governance/identity-governance-overview.md) is an advanced set of [identity governance capabilities](~/id-governance/licensing-fundamentals.md) for Microsoft Entra ID P1 and P2 customers.
Microsoft Entra External ID
3 updatesWhats New Overview
UpdatedNot all Microsoft Entra products are part of Microsoft 365 and Azure (for example, Microsoft Entra External ID). The What's new feature ensures transparency about new features and changes across all Microsoft Entra products in a centralized location.
Are there limitations for cross-cloud synchronization?
This article describes the steps to configure cross-tenant synchronization between Microsoft clouds, such as Microsoft Azure commercial and Microsoft Azure Government, using the Microsoft Entra admin center. When configured, Microsoft Entra ID automatically provisions and de-provisions B2B users in your target tenant.
Microsoft Entra Workload ID
1 updateIn addition to human and device identities, workload identities such as applications, services, and containers require authentication and authorization policies.
Microsoft Entra Global Secure Access
3 updatesCustomer intent: macOS users, I want to download and install the Global Secure Access client.
UpdatedThe Global Secure Access client secures network traffic at the end-user device. This article describes how to download and install the macOS client.
This article tracks the changes in each released version of the Global Secure Access client for macOS.
Next, we activate group membership using the Microsoft Entra admin center, and then attempt to connect with the new role activated.