Daily.Entra.News25 October was a quiet Microsoft Entra ID documentation day: all seven supplied changes were updates, with no new or removed items and no Message Center notices. The most consequential update clarifies a limitation in the Backup Authentication System. Other meaningful edits cover Workday provisioning configuration and PowerShell guidance for assigning enterprise-app access to groups. Nothing in the supplied evidence indicates a new feature launch, preview, general-availability change, or retirement.
Entra ID · AuthenticationThe updated guidance says the backup authentication system cannot perform fresh revocation checks and instead relies on the CRL-check state from when the session was last backed up. If revocation is required before the backup expires, administrators should explicitly revoke the session rather than wait for the CRL. This is a security-relevant documentation clarification; the evidence does not say that the underlying service behavior itself newly changed.
Entra ID · ProvisioningThe Workday provisioning page now directs administrators to enable the Termination Lookahead query for Workday-to-AD/Microsoft Entra ID provisioning jobs. Owners of those integrations should review the relevant job configuration. The supplied evidence does not establish a new preview, general-availability release, or automatic tenant change.
Entra ID · GeneralFor PowerShell-based assignment of an enterprise app to a group, the guidance specifies replacing Get-EntraUser with Get-EntraGroup and New-EntraUserAppRoleAssignment with New-EntraGroupAppRoleAssignment. This is usage guidance for the existing assignment workflow, not evidence of a newly introduced app-role capability.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
To enhance its resilience posture, the backup authentication system can't perform fresh revocation checks. Instead, it relies on the state of the certificate revocation list (CRL) check that's performed when the session was last backed up. If you need to revoke before this backup expires, you should explicitly revoke the session instead of waiting for the CRL.
1. At the bottom of the main **Settings** page, select the **Save** button.
Before integrating applications with Microsoft Entra ID, it's important to know where you are and where you want to go. The following questions are intended to help you think about your Microsoft Entra application integration project.
There are several ways that you might manage applications in Microsoft Entra ID. The easiest way to start managing an application is to use a preintegrated application from the Microsoft Entra gallery, for both SaaS and on-premises or private cloud hosted applications. Developing your own application and registering it in Microsoft Entra ID is an option.
To assign a group to an enterprise app, replace `Get-EntraUser` with `Get-EntraGroup` and replace `New-EntraUserAppRoleAssignment` with `New-EntraGroupAppRoleAssignment`.
> [!div class="checklist"]
Enable Termination Lookahead query for your Workday-to-AD/Microsoft Entra ID provisioning job.
