Learn to configure Conditional Access adaptive session lifetime policies to protect critical apps, sensitive data, and high-impact users in your organization.
Day in brief
Entra ID had a documentation-only day, led by Conditional Access and health-alert guidance
On 6 December, all seven recorded Entra ID changes were Microsoft Learn updates. No new or removed items, Message Center notices, feature launches, previews, general-availability changes, retirements, or tenant-behavior changes are evidenced. The most substantive updates cover adaptive session lifetime policies, Conditional Access lockout troubleshooting, Microsoft Graph health-alert subscriptions, and location-based blocking instructions.
- Conditional Access adaptive session lifetime policy guidance was updated
Entra ID · Conditional AccessThe Entra ID fundamentals page covers configuring adaptive session lifetime policies for critical apps, sensitive data, and high-impact users. The record identifies a page update only; it does not establish a new policy capability, default, availability state, or enforcement change.
- Conditional Access lockout troubleshooting guidance was refreshedEntra ID · Conditional Access
The troubleshooting page addresses cases where an administrator or user is locked out because of an incorrect Conditional Access setting. This is operational recovery guidance, not evidence of a new Conditional Access control or changed policy enforcement.
- Health-alert notification documentation describes the Microsoft Graph subscription flow
Entra ID · FundamentalsThe updated Entra ID page explains sending a POST request to the `/subscriptions` endpoint for health-monitoring alerts, Graph validation and confirmation of the subscription, and notifications to the designated endpoint when the subscribed resource is created. The evidence supports a documentation clarification, not a new alert capability or availability claim.
The Policy Block By Location update specifies selecting **Selected networks and locations** under **Include**. This clarifies an existing configuration step; the supplied evidence does not indicate a change to how location-based Conditional Access policies are evaluated.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
7 updates
Microsoft Entra ID
7 updatesIf you're locked out because of an incorrect setting in a Conditional Access policy:
> [!NOTE]
To start receiving notifications, your application sends a `POST` request to the /`subscriptions` endpoint to subscribe to a specific resource, in this case, health monitoring alerts. Microsoft Graph then validates the request and confirms the subscription. Once the subscription is active, Microsoft Graph sends a notification to your designated endpoint whenever the subscribed resource is created. For more information, see [Microsoft Graph change notifications](/graph/change-notifications-overview).
Policy Block By Location
Updated1. Under **Include**, select **Selected networks and locations**
Sla Performance
Updated| August | 99.999% | 99.999% | 99.999% | 99.999% | 99.999% |
Tutorial Group Provisioning
UpdatedUse case | Parent group type | User member group type | Sync Direction | How sync works