| `exp` | int, a Unix timestamp | Specifies the expiration time before which the JWT can be accepted for processing. A resource may reject the token before this time as well. The rejection can occur for a required change in authentication or when a token is revoked. | |
Day in brief
Entra ID had a quiet documentation-only day: token-expiry semantics and SCIM authentication guidance were clarified.
All five entries were Microsoft Learn updates for Entra ID; there were no new features, retirements, or Message Center notices. The most consequential updates clarify that the JWT `exp` value does not guarantee acceptance until that time and explicitly discourage username/password authentication for new SCIM gallery and non-gallery apps. The remaining edits are lower-impact documentation changes: an app-gallery page adds a link to the SCIM 2.0 tutorial, while the Salesforce and Salesforce Sandbox pages contain a general account-management statement. The supplied evidence does not establish a tenant-side rollout or changed enforcement.
- Access Token Claims Reference clarifies that `exp` is not an unconditional acceptance deadline
Entra ID · AuthenticationThe updated `exp` entry defines a Unix timestamp before which a JWT can be accepted, while stating that a resource may reject it earlier when authentication requirements change or the token is revoked. This is a token-processing documentation clarification, not evidence of a new validation feature.
- SCIM guidance explicitly rules out username/password for new app provisioningEntra ID · Authentication
The updated SCIM comparison labels username/password insecure and not recommended or supported by Microsoft Entra ID, and states that it is not supported for new gallery or non-gallery apps. This is security and compatibility guidance; the supplied evidence does not say that existing integrations were disabled.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
5 updates
Microsoft Entra ID
5 updates|Username and password (not recommended or supported by Microsoft Entra ID)|Easy to implement|Insecure - [Your Pa$$word doesn't matter](https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/your-pa-word-doesn-t-matter/ba-p/731984)|Not supported for new gallery or non-gallery apps.|
Salesforce Tutorial
Updated* Manage your accounts in one central location.
Salesforce Sandbox Tutorial
Updated* Manage your accounts in one central location.
V2 Howto App Gallery Listing
Updated- To implement support of SCIM 2.0 Provisioning follow this tutorial: [build a SCIM endpoint and configure user provisioning with Microsoft Entra ID](~/identity/app-provisioning/use-scim-to-provision-users-and-groups.md)