Native Authentication Api
Updated|-----------------------|-------------------------|------------------------|
Day in brief
Global Secure Access operational guidance dominates 14 March; system-preferred MFA precedence is clarified
This is a documentation refresh rather than a release event: all 39 supplied changes are marked Updated Microsoft Learn documentation, with no new or removed items and no Message Center notices. The bulk concerns Global Secure Access, including traffic-forwarding rollout, remote-network security, SSE coexistence, and troubleshooting. The clearest Entra ID-specific clarification covers dynamic system-preferred MFA ordering and Conditional Access precedence. Nothing supplied establishes a new feature, preview, general-availability milestone, retirement, or changed tenant behavior.
- Global Secure Access traffic-forwarding rollout guidance was refreshed
Global Secure Access · GeneralThe updated article covers rolling out traffic-forwarding profiles to users and groups. Related same-day updates cover management of the Microsoft, Internet Access, and Private Access profiles, plus per-app and Quick Access paths to private resources. This is rollout documentation, not evidence of a newly introduced profile or availability change; teams deploying Global Secure Access should verify assignments against the current procedure.
- Remote-network security guidance covers the main policy controls
Global Secure Access · SecurityThe updated guidance covers applying web content filtering, threat intelligence, and cloud firewall to remote network traffic, with companion pages listing filtering categories and threat types. This is security guidance; the evidence does not say that policy semantics changed. Remote-network operators can use it to check their documented controls and scope.
- Global Secure Access SSE coexistence guidance was refreshed across partner scenarios
Global Secure Access · FundamentalsThe partner ecosystem material covers integrations and coexistence, while parallel updates include solution guides for Zscaler, Netskope, Palo Alto Networks, Cisco Secure Access, Cisco Umbrella, and Cisco VPNs. The evidence supports refreshed coexistence guidance, not a new integration, preview, or GA announcement. Organizations with another SSE should consult the relevant guide when planning a mixed deployment.
- System-preferred MFA documentation clarifies dynamic ordering and policy precedence
Entra ID · Conditional AccessThe update says the preferred authentication-method order is dynamic, changes as stronger methods emerge and the security landscape evolves, and is subordinate to Conditional Access requirements; users can cancel and choose another available method. This is an ordinary documentation clarification, not evidence of a new MFA method or tenant policy change. Update user and help-desk explanations if they describe a fixed order.
- A Global Secure Access DFS workaround is documented
Global Secure Access · TroubleshootingThe updated troubleshooting article addresses a case where a Distributed File System does not operate correctly with Global Secure Access and includes a workaround. The stated impact is limited to deployments using DFS; the evidence does not indicate a general client or connector fix or a broader service change.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
39 updates
Microsoft Entra ID
3 updatesWhen a user signs in, the authentication process checks which authentication methods are registered for the user. The user is prompted to sign-in with the most secure method according to the following order. The order of authentication methods is dynamic. It's updated as the security landscape changes, and as better authentication methods emerge. Users can always cancel and choose a different available sign in method if needed. If your organization has Conditional Access policies that require specific authentication methods, those policies will continue to take priority over the system preferred MFA order. Click the link for more information about each method.
What Is Cloud Sync
UpdatedCloud Sync solves common challenges organizations face with hybrid identity infrastructure by eliminating single points of failure, reducing on-premises management overhead, and enabling complex multi-forest scenarios that support organizational growth and change.
Microsoft Entra Internet Access
5 updatesLearn how to configure web content filtering in Microsoft Entra Internet Access.
Learn how to manage the Internet Access traffic forwarding profile for Microsoft Entra Internet Access.
Global Secure Access includes Microsoft Entra Private Access and Microsoft Entra Internet Access. This article outlines data storage and privacy information.
Global Secure Access points of presence and IP addresses for Microsoft Entra Internet Access and Microsoft Entra Private Access.
Netskope Coexistence
UpdatedLearn how to configure and deploy Microsoft Entra and Netskope Security Service Edge (SSE) solutions together for optimized security and connectivity across private applications, Microsoft 365, and internet access.
Microsoft Entra Private Access
1 updateLearn how to manage the Private Access traffic forwarding profile for Microsoft Entra Private Access.
Microsoft Entra Global Secure Access
30 updatesThis article lists all releases of Microsoft Entra private network connector and describes new features and fixed issues.
Learn how to roll out traffic forwarding profiles to users and groups with Global Secure Access
Learn how to enable and manage the Microsoft traffic forwarding profile for Global Secure Access.
Learn about the built-in administrator roles you can assign to manage Global Secure Access permissions.
Learn how to access the Global Secure Access area of the Microsoft Entra admin center.
Learn how to configure per-app access to private resources in Global Secure Access.
Learn how to configure Quick Access to private resources in Global Secure Access.
Learn how to Install the Windows client to acquire Microsoft traffic in Global Secure Access.
Valid Global Secure Access configurations for custom remote network device links settings, including IKE, ASN, IPSec, and DH group.
Global Secure Access Threat intelligence threat types
Global Secure Access Web content filtering categories
Learn how to assign a remote network to a traffic forwarding profile for Global Secure Access.
Learn how to configure the connectivity between your customer premises equipment and the Global Secure Access network.
Learn how to list remote networks for Global Secure Access.
Learn how to update and delete remote networks for Global Secure Access.
Use these PowerShell samples for Global Secure Access.
Zscaler Coexistence
UpdatedLearn how to configure Microsoft and Zscaler SSE for unified SASE solutions to enhance security and connectivity in your organization.
Microsoft and Palo Alto Network’s Security Service Edge (SSE) coexistence solution guide.
Learn how to apply security policies like web content filtering, threat intelligence, and cloud firewall to remote network traffic in Global Secure Access.
Microsoft and Cisco’s Secure Access coexistence solution guide.
Microsoft and Cisco’s Security Service Edge (SSE) coexistence solution guide.
Microsoft and Cisco VPNs coexistence solution guide.
Configure Azure resources to simulate remote network connectivity to Microsoft's Security Edge Solutions with Global Secure Access.
Learn how Microsoft's Security Service Edge (SSE) solution, Global Secure Access, provides network access control and visibility to users and devices inside and outside a traditional office.
Partner Ecosystem Overview
UpdatedLearn about the Microsoft Secure Access Service Edge (SASE) partner ecosystem. Learn about partner integrations and partner coexistence.
$RegistrySettings = @(
Monitor the health and status of your network traffic with the Global Secure Access dashboard.
Troubleshoot problems installing the Microsoft Entra private network connector.
A troubleshooting article that includes a workaround for a case where a Distributed File System (DFS) doesn't operate correctly with Global Secure Access.
Learn how to Create a remote network, apply Conditional Access, and review the logs in Global Secure Access.