Saturday, 6 September 2025

Azure MFA enforcement guidance is the main admin concern; Entra agent documentation clarifies rollout, licensing, and reviewer workflows.

This was a documentation-heavy period, with no supplied evidence of a new feature launch, preview, general-availability milestone, retirement, or already-applied tenant behavior change. The most consequential item is a Microsoft 365 Message Center security notice about upcoming MFA enforcement for Azure resource management. The other meaningful updates clarify how Entra agent capabilities are documented rather than announcing their availability.

• External ID · Authentication

  External ID: Azure resource-management MFA enforcement is scheduled for 1 October 2025

  The Microsoft 365 Message Center says Microsoft will enforce MFA for all Azure resource-management actions from 1 October 2025, with a postponement option until July 2026. It calls for users to enable MFA, administrators to update Azure CLI and PowerShell, and tenants to use Azure Policy to assess impact. Gallatin customers are advised to implement MFA without enforcement. This is security and enforcement guidance, not a new Entra feature launch.

• Entra ID · Monitoring

  Entra ID agent optimization is documented as report-only with a phased rollout

  The updated phased-rollout guidance describes the agent creating a report-only policy with a phased rollout. This documents a controlled evaluation path; it does not by itself establish a new launch, general availability, or a change to tenant enforcement.

• Entra ID · Conditional Access

  Copilot Entra Agents: Conditional Access optimization requires Entra ID P1

  The updated Copilot Entra Agents documentation states that the Conditional Access optimization agent requires at least a Microsoft Entra ID P1 license. This is a licensing prerequisite clarification for the documented capability, not evidence of a new release or availability change.

• ID Protection · Authentication

  ID Protection Agent Optimization: the risky-user recommendation requires P2

  The updated Agent Optimization page says the risky-users path suggests a policy requiring a secure password change for high-risk users and requires Microsoft Entra ID P2. The supplied item does not state that this capability is new, in preview, or generally available.

• ID Governance · Governance

  ID Governance documentation describes the Access Review Agent reviewer workflow

  The updated Access Review Agent page describes the agent automatically gathering insights and generating recommendations, then guiding reviewers in Microsoft Teams with natural-language summaries and proposed decisions while reviewers make the final call. This is a documentation description of the workflow, not evidence of a new launch.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.