Daily.Entra.NewsThe clearest product announcement is a Microsoft 365 Message Center notice that on-behalf-of ordering for Dynamics 365 Commerce with Microsoft Entra External ID is scheduled for general availability on 11 September 2026. A new Microsoft Entra Internet Access article documents the V2 web-filtering model and its coexistence with V1. Most other updates are documentation clarifications or connector setup changes, including sharper Staged Rollout troubleshooting and more explicit application-claim configuration.
External ID · GeneralMicrosoft announces that on-behalf-of ordering for Microsoft Entra External ID in Dynamics 365 Commerce will reach general availability on 11 September 2026. This is a product availability announcement; the supplied notice does not provide further configuration or migration guidance.
Internet Access · FundamentalsThe new Global Secure Access V2 article describes one policy per security profile, multiple rules with individual actions, a default action, and URL-based FQDN destinations. Existing V1 web-content-filtering policies continue to function until migration. The new article documents the model but does not by itself establish a separate availability milestone.
Entra ID · AuthenticationThe Microsoft Entra Connect article replaces general transition language with scenarios involving extra interactive sign-ins when users are added to or removed from Staged Rollout, including certain Microsoft Entra ID Protection remediation events such as SSPR and risk remediation. The supported administrator outcome is better troubleshooting guidance, not evidence of a newly changed sign-in behavior.
Entra ID · Microsoft identity platformThe updated article explains that SAML applications must configure the `include_granular_amr` setting through the application manifest or Microsoft Graph because the admin center has no corresponding UI. It also documents adding the `amr` optional claim for OIDC token types and clarifies that `include_granular_amr` applies only to SAML.
Entra ID · ProvisioningThe Puzzel integration guide now covers OAuth2 Client Credentials Grant authentication, including creating an OIDC client, setting 3600-second token lifetimes, generating a shared secret, and entering the client ID, secret, and token endpoint. This is connector-specific setup guidance rather than a new general provisioning capability.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The article’s Microsoft MCP Server for Enterprise overview and setup links changed from Microsoft Learn paths to the EnterpriseMCP GitHub repository. The article continues to describe the service as preview, global-service-only, and read-only.
The Puzzel provisioning article now documents OAuth2 Client Credentials Grant authentication. It adds steps to create an OIDC client, set token lifetimes to 3600, generate a shared secret, and enter the client ID, secret, and token endpoint.
The tutorial now states that Client Credentials Authentication is supported.
The tutorial now documents entering a Tenant URL, Client identifier, Client secret, and OAuth token endpoint, and includes a list of SCIM user attributes and data types.
The account discovery documentation now links to the Microsoft MCP Server for Enterprise GitHub repository instead of Microsoft Learn pages for investigating reports and provisioning an MCP client.
The documentation, dated August 11, 2026, replaces general transition text with scenarios describing additional interactive sign-ins when users are added to or removed from Staged Rollout. It also covers certain Microsoft Entra ID Protection remediation events, including SSPR and risk remediation.
The documentation now explains how to configure granular AMR values for SAML applications through the manifest or Microsoft Graph, since the admin center has no UI option for `include_granular_amr`. It also documents adding the `amr` claim to OIDC token types and clarifies that `include_granular_amr` applies only to SAML.
The heading changed from “Workaround for newly added Staged Rollout users” to “Workaround to avoid one additional federated sign-in.” No procedural content changed in the supplied diff.
We are announcing the ability to enable on-behalf-of ordering for Microsoft Entra External ID (EEID) in Dynamics 365 Commerce. This feature will reach general availability on September 11, 2026 How does this affect me?
A new concept article documents the V2 web filtering model in Microsoft Entra Internet Access, including policies, rules, destination matching, and coexistence with V1 web content filtering.
