Learn about the new Microsoft Entra bulk operations experience for managing users, groups, and devices.
Agent ID documentation flags a coming Agent 365 requirement for agent protection; External ID adds Android fraud-SDK header guidance
19 June's meaningful changes are mostly documentation updates rather than announced service launches. The clearest licensing change is the Agent ID guidance that ID Protection for agents will require a Microsoft Agent 365 license starting soon. A new External ID article covers custom x-* headers for native authentication requests in Android (Kotlin), while updated Entra ID material describes a bulk-operations experience explicitly marked Preview and clarifies that Connect staged-rollout group edits can take up to 24 hours to apply. The supplied evidence indicates no retirement or general-availability announcement.
- ID Protection for agents gains a stated licensing requirement
Agent ID · Security
Updated Agent ID licensing guidance says ID Protection for agents will require a Microsoft Agent 365 license starting soon to extend protection through Microsoft Entra Agent ID. This is a forthcoming licensing requirement in the documentation, not a reported general-availability launch or retirement, and no effective date is supplied.
- External ID adds Android/Kotlin custom-header integration guidance
External ID · Authentication
A new Microsoft Learn article explains how an Android (Kotlin) app can attach custom x-* headers to native authentication network requests so fraud-detection SDKs can integrate with Microsoft Entra External ID. The evidence establishes new implementation guidance, not a tenant-side setting or a service-availability change.
- Bulk operations experience is documented as Preview
Entra ID · Fundamentals
The updated Microsoft Entra bulk-operations article describes a new experience for managing users, groups, and devices and labels it Preview. Same-day updates cover CSV-based bulk add and remove operations and bulk group-membership download, but the supplied evidence does not establish general availability or a rollout date.
- Connect staged-rollout group edits may take up to 24 hours
Entra ID · General
Updated Connect staged rollout guidance says adding or removing users in a staged-rollout group can take up to 24 hours to take effect. This is an operational timing clarification in the documentation, not evidence of a new rollout feature or an immediate propagation guarantee.
- Conditional Access licensing coverage is spelled out for Entra Suite and Microsoft 365 E7
Entra ID · Conditional Access
The updated Conditional Access licensing page states that Microsoft Entra Suite includes all Microsoft Entra Conditional Access features, and that Microsoft 365 E7 includes those features through Entra Suite. This is an entitlement-documentation clarification; the evidence does not indicate a Conditional Access behavior change.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
28 updates
Microsoft Entra ID
23 updatesAdd your custom domain
UpdatedInstructions about how to add your custom domain name to your tenant.
How to view restorable users, restore a deleted user, or permanently delete a user with Microsoft Entra ID.
Introduction to the Microsoft Entra product family including links to get started.
Default user permissions
UpdatedCompare the default user permissions available in Microsoft Entra ID and learn how to restrict access.
Microsoft Entra licensing
UpdatedThis article documents licensing requirements for Microsoft Entra features.
Group Based Licensing
UpdatedLearn about Microsoft Entra group-based licensing, including how it works,
Managing user license assignments individually is time consuming and error prone. If you [assign licenses to groups](~/fundamentals/licensing.md?context=azure/active-directory/users-groups-roles/context/ugr-context) instead, you experience easier large-scale license management.
Add group members in bulk by using a comma-separated values (CSV) file.
Remove group members in bulk operations by using a comma-separated values (CSV) file.
Bulk Operations Csv Guidance
Updatedmanager: pmwongera
manager: pmwongera
Download group members in bulk in the Microsoft Entra admin center.
Connect Staged Rollout
Updated>Editing a group (adding or removing users), it can take up to 24 hours for changes to take effect.
Licensing Authentication
UpdatedThe following table lists features that are available for authentication in the various versions of Microsoft Entra ID. Plan out your needs for securing user sign-in, then determine which approach meets those requirements. For example, although Microsoft Entra ID Free provides security defaults with multifactor authentication, only Microsoft Authenticator can be used for the authentication prompt, including text and voice calls. This approach might be a limitation if you can't make sure that Authenticator is installed on a user's personal device.
Starting February 2026, Microsoft Authenticator will block Entra credentials on jailbroken/rooted iOS and Android devices to enhance security. The rollout includes a warning phase followed by blocking. This feature is automatic, affects all users on such devices, and requires no admin action. Notify users and update documentation accordingly.
Entra Admin Center
Updated- **[Entra ID](#entra-id)** — Manage users, groups, devices, applications, roles, and authentication methods.
Learn the core concepts of identity and access management (IAM), including authentication, authorization, and identity providers, to secure resources effectively.
This feature currently supports the following Windows Server distributions:
Here are some of the limits and constraints for branding themes.
Licensing Conditional Access
UpdatedMicrosoft Entra Suite includes all Microsoft Entra Conditional Access features. Microsoft 365 E7 also includes Conditional Access features through the Entra Suite.
Entra Offerings
Updated>The licensing options on this page aren't comprehensive. You can get detailed information about the various options at the [Microsoft Entra pricing page](https://www.microsoft.com/security/business/microsoft-entra-pricing) and at the [Compare Microsoft 365 Enterprise plans and pricing page](https://www.microsoft.com/microsoft-365/enterprise/microsoft365-plans-and-pricing).
> Error code 1002013 indicates an expected (and successful) interrupt of the sign-up flow. [Learn more](howto-troubleshoot-sign-up-errors.md#sign-up-error-codes)
Microsoft Entra Agent ID
2 updatesMicrosoft Entra Agent ID licensing details
Starting soon, ID Protection for agents will require a [Microsoft Agent 365 license](https://www.microsoft.com/microsoft-agent-365#plans-and-pricing) to extend protection to agents through [Microsoft Entra Agent ID](../agent-id/what-is-microsoft-entra-agent-id.md#how-to-get-started).
Microsoft Entra ID Governance
1 update1. Assign all discovered users to a specific access package:
Microsoft Entra External ID
2 updatesLearn how to attach custom x-* headers to native authentication network requests in an Android (Kotlin) app to integrate fraud-detection SDKs with Microsoft Entra External ID.
Direct Federation
Updated1. On the **New SAML/WS-Fed IdP** page, enter the following:
