Learn how to sign up users with email one-time passcode or email and password, and collect user attributes including a username (alias), in an iOS/macOS app by using native authentication.
Day in brief
Excel Power Query’s Entra authentication change creates a 24 July 2026 deadline; the rest is mainly operational guidance and documentation maintenance.
The most consequential item is a required Excel client update: the Organizational Accounts authentication flow in Excel Power Query is changing, with a risk of authentication loss for older Excel 2021 installations. Two new pages provide Lifecycle Workflows execution safeguards and Global Secure Access security guidance. Most other changes are ordinary native-authentication, SSPR, and prerequisite documentation updates. No preview, general-availability announcement, or retirement is identified in the supplied evidence.
- Excel Power Query requires an update for Entra organizational authentication
Entra ID · AuthenticationChanged client behavior, not a new Entra feature: Excel Power Query is updating its Organizational Accounts authentication flow for security and reliability. Excel 2021 version 21.08 or older must be updated to build 16.0.14334.20754 or later by 24 July 2026, or upgraded to a newer Excel version, to avoid authentication loss. Microsoft 365 and newer Excel versions are unaffected.
- Lifecycle Workflows execution limits and quarantine handling are newly documented
ID Governance · GovernanceA new Learn article explains how to set tenant-wide and workflow-specific execution limits and manage quarantined workflows in Lifecycle Workflows to prevent large-scale impact. This is documentation of operational safeguards, not a stated feature preview or general-availability announcement, and no mandatory configuration change or rollout date is given.
- Global Secure Access receives new security-operations guidance
Internet Access · SecurityThe new guide covers detection patterns and Microsoft Sentinel analytics for Private Access, Internet Access, Remote Networks, and Microsoft Traffic in Microsoft Entra Global Secure Access. It is security and monitoring guidance rather than an access-feature availability announcement; security teams can use it to review detection coverage where these traffic paths are deployed.
- Native authentication implementation guidance was refreshed across mobile and SPA scenariosEntra ID · Authentication
Updated Entra ID pages describe sign-up with email one-time passcode or email/password and collection of attributes including a username (alias) for iOS/macOS and Android apps. Related React and Angular SPA sign-up tutorials and mobile sign-in/sign-out tutorials were also updated. This is an implementation-documentation refresh, not evidence of a new authentication rollout.
- SSPR documentation clarifies a synchronized authentication-data pathEntra ID · Authentication
The updated SSPR authentication-data guidance explains that existing authentication data from Active Directory Domain Services can be synchronized to Microsoft Entra ID and SSPR without user interaction. It also describes users changing or resetting passwords without having previously registered contact information. This is documentation clarification; the entry does not announce a new mandate or rollout.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
12 updates
Microsoft Entra ID
9 updatesLearn how to sign up users with email one-time passcode or email and password, and collect user attributes including a username (alias), in an Android app by using native authentication.
1. Create *sign-up/components/InitialForm.tsx* file, then paste the code from [sign-up/components/InitialForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/sign-up/components/InitialForm.tsx). This component displays a form that collects user sign-up attributes.
```
Some organizations prefer to bootstrap this process through synchronization of authentication data that already exists in Active Directory Domain Services. This synchronized data is made available to Microsoft Entra ID and SSPR without requiring user interaction. When users need to change or reset their password, they can do so even if they haven't previously registered their contact information.
To sign in a user using username (email) and password, collect the email and password from the user. If the username and password are valid, the app signs in the user.
To sign in a user using the **Email with password** flow, capture the email and password. If the username and password are valid, the app signs in the user.
Microsoft Teams for the web will respect Microsoft Entra ID's "Keep Me Signed In" (KMSI) settings starting late June 2026. Sessions will persist only if users choose to stay signed in; otherwise, sessions clear on browser close, enhancing security on shared devices. No immediate action is required.
| 300,000–600,000 |1.6 GHz |32 GB |450 GB |
Microsoft Entra ID Governance
1 updateLearn how to set tenant-wide and workflow-specific execution limits and manage quarantined workflows in Lifecycle Workflows to prevent large-scale impact.
Microsoft Entra Internet Access
1 updateSecurity operations guide for Microsoft Entra Global Secure Access covering detection patterns and Sentinel analytics for Private Access, Internet Access, Remote Networks, and Microsoft Traffic.
Operations
Updated| Guide | What it covers |