Known Issues
UpdatedThis is a current list of known limitations with the Microsoft Entra ECMA Connector Host and on-premises application provisioning.
Day in brief
18 December 2025: Cloud Sync remediation and Global Secure Access TLS limits stand out in a documentation-heavy day
The supplied period is dominated by Microsoft Learn maintenance rather than a feature launch or general-availability announcement. The clearest administrator-relevant updates are more specific Cloud Sync troubleshooting guidance and explicit Global Secure Access TLS inspection limits. External ID documentation also includes a removed quickstart page and updated service-limit material; the evidence does not indicate that an underlying product capability was retired or that service behavior changed.
- Microsoft Entra Cloud Sync error guidance provides a concrete recovery path
Entra ID · TroubleshootingThe updated Error Codes entry for AzureActiveDirectoryInvalidCredential directs administrators to repair the Cloud Sync service account through the troubleshooting instructions. If the error persists, it says to contact support with the Job ID from the configuration status pane. This is troubleshooting guidance, not evidence of a Cloud Sync behavior change.
- Global Secure Access TLS inspection limits are stated explicitly
Global Secure Access · FundamentalsThe updated Transport Layer Security documentation says TLS inspection supports up to 100 policies, 1,000 rules, and 8,000 destinations. The supplied evidence does not establish that these limits were newly introduced or changed, so this is best treated as an operational documentation clarification.
- Entitlement Management assignment guidance marks identity lifecycle as preview
ID Governance · GovernanceThe updated Access Package Assignments article describes viewing assignees, policies, status, and identity lifecycle, and describes direct assignment when an access package has an appropriate policy. Identity lifecycle is explicitly identified as preview; this is not a general-availability announcement.
- The External ID Quickstart Trial Setup documentation page was removed
External ID · GeneralThe change is recorded as a Removed page for External ID. Administrators with internal links or runbooks pointing to that page should review them, but the evidence supports only a documentation-page retirement—not retirement of External ID trials or trial functionality.
- External ID service-limit documentation records phone-number-based text limitsExternal ID · General
The updated Service Limits page includes a phone-number-based limits row showing 15, 20, 30, and 50 texts. The supplied excerpt does not identify the corresponding tiers or say whether the values changed, so it should be read as a reference update rather than a confirmed policy or behavior change.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
13 updates
Microsoft Entra ID
3 updatesApp Provisioning Sql
Updated12. Select **OK** twice. Close the ODBC Data Source Administrator. The DSN connection file is saved by default to your **Documents** folder.
Error Codes
Updated|AzureActiveDirectoryInvalidCredential|Error Message: We found an issue with the service account that is used to run Microsoft Entra Cloud Sync. You can repair the cloud service account by following the instructions at [here](./how-to-troubleshoot.md). If the error persists, please contact support with Job ID (from status pane of your configuration). Additional Error Details: CredentialsInvalid AADSTS50034: The user account {EmailHidden} doesn't exist in the skydrive365.onmicrosoft.com directory. To sign into this application, the account must be added to the directory. Trace ID: 0000aaaa-11bb-cccc-dd22-eeeeee333333 Correlation ID: aaaa0000-bb11-2222-33cc-444444dddddd Timestamp: 2021-01-12 21:08:29Z |This error is thrown when the sync service account ADToAADSyncServiceAccount doesn't exist in the tenant. It can be due to accidental deletion of the account.|Use [Repair-AADCloudSyncToolsAccount](reference-powershell.md#repair-aadcloudsynctoolsaccount) to fix the service account.|
Microsoft Entra ID Governance
2 updatesIn entitlement management, you can see who is assigned to access packages, their policy, status, and identity lifecycle (preview). If an access package has an appropriate policy, you can also directly assign identities to an access package. This article describes how to view, add, and remove assignments for access packages.
Licensing Governance
Updated|Feature|Free|Microsoft Entra ID P1|Microsoft Entra ID P2|Microsoft Entra ID Governance| Microsoft Entra Suite |
Microsoft Entra External ID
6 updatesQuickstart Get Started Guide
Updated1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com).
External Identities Pricing
UpdatedService Limits
Updated|Limits based on phone number |15 texts |20 texts |30 texts |50 texts |
Quickstart Trial Setup
RemovedA Microsoft Entra documentation page was updated: Quickstart Trial Setup.
Visual Studio Code Extension
UpdatedThis extension provides a basic setup that automatically creates a tenant for applications and prepares it for users. It also streamlines your workflow by automatically populating values such as application IDs into your configuration file for a smoother setup process.
Guide Explained
Updated:::image type="content" source="media/concept-guide-explained/trial-creation.png" alt-text="Flowchart that shows the trial tenant creation step in the guide.":::
Microsoft Entra Global Secure Access
2 updatesTransport Layer Security
Updated- TLS inspection supports up to 100 policies, 1000 rules, and 8000 destinations.
1. Select **Create CSR**. This step creates a .csr file and saves it to your default download folder.