Wednesday, 13 May 2026

13 May 2026: security guidance and scope clarifications, not a feature release

The supplied feed is documentation-led: all 15 entries are updated Microsoft Learn pages, with no new or removed items and no Message Center notices. The most consequential changes are updated Microsoft Entra ID guidance for Remote Desktop Connections in phishing-resistant passwordless deployments, an explicit workforce-only boundary for Microsoft Entra Backup and Recovery that excludes External ID and Azure AD B2C, and a Private Access guest-billing condition. The remaining Global Secure Access and Private Access edits mainly refine monitoring, alerting, health checks, and post-deployment runbooks. The evidence does not show a new feature, preview, general availability announcement, retirement, or underlying tenant behavior change.

• Entra ID · Authentication

  Security guidance: Entra ID remote desktop in passwordless deployments

  The updated page addresses considerations for Remote Desktop Connections when an organization deploys passwordless and phishing-resistant authentication with Microsoft Entra ID. This is deployment and security guidance, not an announcement of a new authentication method or availability change.

• External ID · Monitoring

  Scope clarification: Backup and Recovery excludes External ID and B2C

  The updated recovery-model page states that Microsoft Entra Backup and Recovery is available for workforce tenants only; Microsoft Entra External ID and Azure AD B2C tenants aren't supported. This documents a support boundary rather than evidencing a new exclusion introduced on this date.

• Private Access · General

  Licensing clarification: Private Access guest billing

  The updated licensing guidance states that guest users are billed only when they actively sign in to the Global Secure Access client for Private Access. This provides a concrete condition for licensing and cost reviews; the entry does not say that the billing policy changed on this date.

• Global Secure Access · Monitoring

  Operational clarification: Global Secure Access Microsoft Traffic monitoring

  The Operate Microsoft Traffic section is organized in the order administrators should implement monitoring for Microsoft traffic. This clarifies the monitoring runbook; the supplied entry does not call out a change to traffic configuration or service behavior.

• Private Access · General

  Operational guidance: Microsoft Entra Private Access

  The post-deployment operations guide covers alerting, health checks, integration, automation, and operational metrics for Microsoft Entra Private Access, the Zero Trust network access capability. It is a runbook update, not a feature, preview, or general availability announcement.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.