Microsoft Entra ID allows the use of a range of authentication methods to support a wide variety of sign-in scenarios. For an overview of the available options, see [Authentication methods in Microsoft Entra ID](overview-authentication.md). Administrators can specifically configure each method to meet their goals for user experience and security. This topic explains how to manage authentication methods for Microsoft Entra ID, and how configuration options affect user sign-in and password reset scenarios.
Day in brief
Entra administrators face a certificate-trust deadline while EAM preview registration is enforced
The most consequential update is a required trust change: Microsoft Entra will move from DigiCert Global Root G1 to G2 certificates by January 7, 2026. Organizations that do not trust the G2 root, or that pin the G1 root, risk authentication failures. The other substantive item is an External Authentication Methods (EAM) public preview update: registration enforcement began December 8, 2025. The remaining five entries are documentation updates; their supplied summaries do not establish a new feature or changed service behavior.
- Action required: trust DigiCert Global Root G2 for Entra services
Entra ID · AuthenticationThe Message Center major update says Microsoft Entra will switch from DigiCert Global Root G1 to G2 certificates by January 7, 2026. Organizations must trust the DigiCert G2 root CA and remove G1 certificate pinning or authentication failures may result.
- External Authentication Methods preview now enforces registrationEntra ID · Authentication
The EAM public preview update says registration enforcement began December 8, 2025. Existing users are pre-registered, while users added after December 2, 2025, must complete inline setup; administrators can also register users. This remains a public preview update, not evidence of general availability.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
5 updates
Microsoft Entra ID
5 updatesSspr Howitworks
Updated* [Software OATH tokens](concept-authentication-oath-tokens.md#software-oath-tokens)
Mfa Registration Campaign
Updatedauthor: mjsantani
Disable User Sign In Portal
UpdatedIn this article, you learn how to prevent users from signing in to an application in Microsoft Entra ID through both the Microsoft Entra admin center and PowerShell. If you're looking for how to block specific users from accessing an application, use [user or group assignment](./assign-user-or-group-access-portal.md).
GET https://graph.microsoft.com/beta/applications/{application-id}?$select=displayName,isDisabled,appId