Saturday, 20 June 2026

Microsoft Authenticator’s rooted-device block is the key behavior change; most other updates clarify documentation

The period is documentation-heavy rather than a feature-launch or retirement day. The clearest operational notice says Microsoft Authenticator will move from warning to blocking Entra credentials on jailbroken or rooted iOS and Android devices, automatically for all users on those devices. Other notable updates clarify External ID billing, Internet Access lab sequencing, ID Protection risk-detection guidance, and Global Secure Access signaling. Three new Entra ID pages document Purview workload roles, but the supplied evidence does not establish a change to role availability or permissions.

• Entra ID · Authentication

  Microsoft Authenticator will block Entra credentials on rooted or jailbroken devices

  The Message Center notice describes a warning phase followed by blocking on jailbroken or rooted iOS and Android devices. It says the behavior is automatic, applies to all users on those devices, and requires no admin action; administrators should notify users and update documentation.

• External ID · Authentication

  External ID billing guidance defines monthly active users

  The updated FAQ defines MAU as unique users with authentication activity during a calendar month. It also distinguishes the core offer from premium add-ons and states that the core offering is free for the first 50,000 MAU. This is a pricing-documentation clarification, not evidence of a changed price or tenant feature.

• Internet Access · Conditional Access

  Internet Access tutorials clarify reuse of the baseline security configuration

  The updated tutorial says the exercises should be followed in order. The baseline web-filtering lab creates a security profile and assigns it to a Microsoft Entra Conditional Access policy; later labs should use that existing profile and policy rather than creating duplicates.

• ID Protection · Fundamentals

  ID Protection documentation links source IP restoration to detection accuracy

  The updated Source IP Restoration page states that the capability improves the accuracy of risk detection in Microsoft Entra ID Protection. The supplied summary does not identify a new setting, rollout status, or required administrator change, so this is best treated as guidance rather than a confirmed service launch.

• Global Secure Access · General

  Universal Tenant Restrictions now points to Global Secure Access signaling guidance

  The updated page links administrators to instructions for enabling Global Secure Access signaling for Microsoft Entra ID and Microsoft Graph. The record supports a documentation cross-reference, not a claim that signaling is newly available or automatically enabled.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.