Thursday, 9 October 2025

External ID guidance clarifies direct identity-provider sign-in; Private Access prerequisites were also updated

9 October was a quiet, documentation-only day: both recorded changes were Microsoft Learn updates, with no new, removed, or Message Center items. The most consequential update clarifies how External ID sign-in URLs can use `domain_hint` to send users directly to a selected identity provider. The Private Access update concerns prerequisites for configuring access to Active Directory domain controllers, but the supplied evidence does not include the prerequisite list.

• External ID · Authentication

  External ID guidance documents `domain_hint` direct routing to identity providers

  The updated Authentication Methods Customers guidance explains that users normally reach the Microsoft sign-in page first, then select an identity provider. Adding `domain_hint` to the sign-in URL can bypass that page and take users directly to the selected Facebook, Google, Apple, custom OIDC, or SAML provider. This is documented as an experience simplification; the change record does not establish that the capability is newly launched or newly available.

• Private Access · General

  Private Access domain-controller configuration guidance was updated

  The Configure Domain Controllers page was updated around the requirements for configuring Microsoft Entra Private Access for Active Directory domain controllers. The supplied summary stops before listing those requirements, so it supports a documentation review but not a claim about which prerequisite changed.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.