Wednesday, 22 July 2026

External ID authentication-retirement scope and tenant-restriction guidance lead a documentation-heavy 22 July

All supplied entries for the period are Microsoft Learn documentation updates; there are no new or removed entries. The most consequential update clarifies that B2B and internal guest users are in scope for the retirement of Microsoft-provided SMS and voice authentication, with passkey support planned by the end of calendar year 2026. Global Secure Access guidance also clarifies Universal Tenant Restrictions coverage and documents two optional Web Content Filtering conditions. The three Entra ID branding updates are ordinary reference and instructional refreshes. The evidence does not establish a new launch, preview, or general-availability milestone.

• External ID · Authentication

  External ID: Microsoft-provided SMS and voice retirement includes B2B and internal guest users

  The updated retirement guidance places B2B users and internal guest users within the scope of Microsoft-provided SMS and voice authentication retirement. It says passkey support for these users is planned by the end of calendar year 2026. This is future retirement guidance; the supplied evidence does not provide a final retirement date or say that passkey support is generally available.

• Global Secure Access · Authentication

  Global Secure Access: Universal Tenant Restrictions are documented for all Entra-integrated third-party apps

  The updated Universal Tenant Restrictions page states that the capability works with all Microsoft Entra-integrated third-party apps at the authentication plane during sign-in. This is a coverage and behavior clarification; the item is not identified as a new feature, preview, or GA announcement.

• External ID · Architecture

  External ID: architecture guidance points organizations toward Tenant Restrictions v2

  The updated architecture guidance directs readers to set up tenant restrictions v2 and tells organizations using v1 to review the v1-to-v2 migration guide. This is concrete migration guidance, but the supplied evidence does not state a forced cutover date or another availability milestone.

• Global Secure Access · General

  Global Secure Access: Web Content Filtering documents two optional traffic-aware rule conditions

  The update states that Web Content Filtering supports two optional rule conditions that enable traffic-aware policy enforcement. The supplied summary does not name the conditions or provide release status, so this is best treated as documented capability detail rather than a confirmed launch or GA change.

• Agent ID · General

  Agent ID: sponsor relationships are differentiated across agent resources and user accounts

  The revised guidance distinguishes sponsors associated with an agent's identity, blueprint, and blueprint principal from sponsors associated with an agent user account, and notes differences from the Entra user sponsor relationship. This is an object-model and governance clarification, not evidence of a new sponsor capability.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.