Saturday, 18 October 2025

Documentation-only day: targeted guidance updates for Global Secure Access, FIDO2 attestation, and External ID fraud protection

All five tracked changes on 18 October were Microsoft Learn documentation updates; there were no new or retired items and no Message Center notices. The most substantive edits concern Global Secure Access certificate handling, Entra ID FIDO2 hardware attestation, and the administrator roles used for External ID Fraud Protection. The supplied summaries for the connector troubleshooting and SAP HCM provisioning pages show only metadata or reference-section edits, so they do not establish a technical or service-behavior change.

• Global Secure Access · Security

  Global Secure Access TLS guidance adds a concrete certificate-signing example

  The updated Transport Layer Security page includes an OpenSSL command for signing a CSR with a root CA chain and key, using SHA-256, a 370-day validity, and a configured signed-CA extension. This is operational certificate guidance; the supplied evidence does not indicate a service-side TLS change or a new mandatory requirement.

• Entra ID · Authentication

  Entra ID FIDO2 attestation documentation explains hardware-preparation requirements

  The updated fundamentals page explains requirements for preparing FIDO2 hardware for attestation with Microsoft Entra ID. This is security and implementation guidance for FIDO2 vendors or teams preparing keys, not evidence of a newly released attestation capability or changed policy.

• External ID · Authentication

  External ID Fraud Protection guidance clarifies the required administrator roles

  The updated integration page states that users should sign in to the Microsoft Entra admin center as at least an Authentication Extensibility Administrator or Application Administrator. The evidence supports a permissions clarification for the documented integration, but not a change to role assignments or Fraud Protection behavior.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.