Friday, 19 September 2025

AD FS certificate-rotation guidance headlines a documentation-only Entra ID update day

All three recorded changes on 19 September are updates to Microsoft Learn documentation for Entra ID. The most security-relevant updates concern emergency AD FS token-signing certificate rotation and certificate checks across AD FS and Microsoft Entra ID trust properties. The evidence shows no new feature, preview, general-availability launch, retirement, or service behavior change.

• Entra ID · General

  Emergency AD FS certificate-rotation procedure updated

  The updated guidance covers revoking the old AD FS token-signing certificate and determining its thumbprint. This is operationally security-sensitive guidance, but the record does not indicate a new certificate behavior or an immediate rotation requirement. Review it before handling an emergency certificate event.

• Entra ID · General

  Federated Microsoft 365 certificate-check guidance updated

  The revised page addresses checking certificates configured in AD FS and the Microsoft Entra ID trust properties for a specified domain. This is relevant to federation validation and troubleshooting; no actual trust or certificate configuration change is reported.

• Entra ID · General

  Multiple top-level domain federation guidance updated

  The updated documentation covers setting up and configuring multiple top-level domains with Microsoft 365 and Microsoft Entra ID. Administrators operating multi-domain federation should review the page, but the evidence does not establish a newly introduced capability or changed federation behavior.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.