Tuesday, 23 September 2025

Temporary Access Pass guidance clarifies a prerequisite for hybrid-joined Windows Hello for Business setup; the rest of the period is documentation maintenance.

The 23 September feed contains 11 updated Microsoft Learn items, with no new or removed items and no message-center announcements. The clearest operational point is an Entra ID authentication clarification: on hybrid-joined devices, users must authenticate with a password, smartcard, or FIDO2 key before using Temporary Access Pass to set up Windows Hello for Business. Other sufficiently specific updates clarify ID Governance’s inactive-user pre-offboarding template and Global Secure Access’s private name-resolution path. The supplied records do not identify a preview, general-availability release, retirement, or service-behavior change.

• Entra ID · Authentication

  Entra ID: hybrid-joined TAP setup prerequisite clarified

  The updated Temporary Access Pass guidance says that, on hybrid-joined devices, a user must first authenticate with another method—such as a password, smartcard, or FIDO2 key—before using TAP to set up Windows Hello for Business. This is a documentation clarification, not evidence of a newly launched TAP feature or confirmed service-behavior change.

• ID Governance · Governance

  ID Governance: inactive-user pre-offboarding template described

  The Lifecycle Workflow Templates update describes the Pre-Offboard inactive users template as a way to configure tasks that must be completed before offboarding inactive users. It clarifies the intended workflow pattern; the supplied evidence does not establish a new template release or a change to existing workflow execution.

• Global Secure Access · Fundamentals

  Global Secure Access: private name-resolution path clarified

  The Private Name Resolution guidance states that, when a request such as app.contoso.com is not cached locally, the DNS query is sent to the DNS proxy at the Global Secure Access edge. This is an architectural documentation clarification; no configuration requirement or changed service behavior is stated.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.