Saturday, 1 August 2026

1 August 2026: Custom-branding CSS retirement is the clearest action; Conditional Access enforcement and tenant-governance guidance are the other key signals

Two Microsoft Entra ID Message Center items carry the greatest operational weight. Microsoft Entra ID will retire custom CSS positioning properties in company branding starting in October 2026, while a Conditional Access notice gives 15 June 2026 as the start date for stronger enforcement of policies targeting All resources with exclusions in certain scope-only sign-ins. The remaining notable changes are documentation and architecture guidance: Tenant Governance baseline and drift-monitoring procedures, a new tenant-estate architecture set, and Internet Access/Defender for Cloud Apps coexistence instructions. The supplied evidence does not establish a GA or feature launch for those Learn updates.

• Entra ID · Authentication

  Retirement: custom CSS positioning in Microsoft Entra company branding

  Microsoft Entra ID will retire support for custom CSS positioning properties in company branding starting in October 2026 as a security and phishing-resistance measure. Existing users must remove those properties, with no migration path provided; branding elements will remain visible but can return to default placement.

• Entra ID · Conditional Access

  Changed behavior: Conditional Access enforcement for resource exclusions

  A Message Center notice states that, starting 15 June 2026, Conditional Access policies targeting All resources with exclusions will be enforced for sign-ins requesting only certain OIDC or directory scopes. Custom applications using only those requests may encounter new challenges such as MFA. Because the stated date precedes this reporting period, affected app owners should evaluate current sign-in behavior; the notice says most organizations need no action.

• ID Governance · Governance

  Tenant Governance documentation now connects snapshots, drift monitoring, and permissions

  A new Microsoft Entra Tenant Governance article documents configuration snapshots for tenant baselines or audit evidence. Related updates cover monitors that evaluate a tenant against a baseline and report configuration drift, viewing results, end-to-end deployment, and the application permissions and roles used by the configuration-management service. The evidence describes a procedural documentation expansion, not a stated preview, GA, or service-behavior change.

• Entra ID · Architecture

  New guidance for composing a Microsoft Entra tenant estate

  A new architecture-guidance set introduces common tenant patterns intended to help organizations meet requirements with as few tenants as possible. Companion guidance covers primary production, nonproduction multitenant environments, collaborating production tenants, business-partner access, critical business systems, and hybrid identity and isolation. It is design guidance for comparing architectural options, not evidence of a mandatory tenant restructuring.

• Internet Access · General

  New coexistence guidance for Microsoft Entra Internet Access and Defender for Cloud Apps

  A new article explains how to configure Microsoft Entra Internet Access alongside Microsoft Defender for Cloud Apps without proxying traffic twice. This is targeted operational guidance for environments using both products, rather than an announced launch or availability change.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.