Tuesday, 23 June 2026

Upcoming Conditional Access enforcement change leads a documentation-heavy 23 June

The main tenant-impact signal is an upcoming Microsoft Entra Conditional Access change affecting policies with resource exclusions. Microsoft also published new guidance for passwordless sign-in to Entra Connect Sync. Most other activity consists of documentation maintenance or operational clarification; no retirements or explicit general-availability or preview announcements are evidenced.

• Entra ID · Conditional Access

  Conditional Access: upcoming enforcement change for resource exclusions

  The Microsoft 365 Message Center reports an upcoming change intended to improve enforcement for Conditional Access policies with resource exclusions. It is a tenant-facing notice, but the supplied text does not state the timing, precise policy-evaluation change, or whether any reconfiguration is required. Review the full notice and affected policies rather than treating this as a completed GA or preview launch.

• Entra ID · Authentication

  New Entra Connect Sync guidance covers FIDO2 and passkey sign-in

  Microsoft added Learn documentation for signing in to Microsoft Entra Connect Sync with passwordless methods, including FIDO2 security keys and passkeys. This is a new documentation article, not evidence that a new Connect Sync feature has launched or that tenant settings changed; it provides a sign-in procedure for administrators to assess against current operating practices.

• ID Protection · Fundamentals

  ID Protection guidance links source IP restoration with more accurate risk detection

  The updated Source IP Restoration documentation states that the capability improves the accuracy of Microsoft Entra ID Protection risk detections. The supplied evidence describes a documentation update and does not identify a new detection, availability change, or configuration requirement.

• Entra ID · General

  Connect Sync staging-server guidance adds export analysis help

  The Connect Sync Staging Server page now documents using the csanalyzer.ps1 PowerShell script to map export.csv changes from connector-space distinguished names to common identifiers such as displayName and userPrincipalName. This is an operational documentation improvement that can make pending-export review easier, not a stated change to synchronization behavior.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.