The documentation now describes validation for both single-tenant and multitenant OIDC applications, including configuration-specific endpoint requirements and eligibility guidance.
Day in brief
App Governance permissions will align with Defender XDR in mid-November
Microsoft Defender for Cloud Apps will change App Governance permissions for selected Microsoft Entra roles starting in mid-November 2026. The period also adds identity-verification integration guidance for External ID, documents the irreversible nature of the Private Access v2 switch, and expands OIDC App Gallery validation guidance. Remaining updates are primarily link and ownership metadata changes.
- Defender for Cloud Apps will change App Governance role permissions
Entra ID · GovernanceStarting in mid-November 2026, App Governance permissions for the Cloud App Security, Compliance Administrator, and Compliance Data Administrator Microsoft Entra roles will be aligned with Defender XDR role-based access control. Administrators should review and update role assignments as needed.
- Private Access v2 switching is documented as non-reversible
Private Access · GeneralThe Manage Private Access Profile guidance now states that switching to v2 cannot be undone. Existing configurations carry over, and the change does not alter end-user traffic.
- New External ID guidance compares three identity-verification patterns
External ID · SecurityThe new article compares Verified ID credentials, direct REST API claims, and OIDC federation, including partner-based proofing, External ID authentication, setup considerations, privacy and credential considerations, and longer-running verification journeys.
- OIDC App Gallery validation now covers single-tenant and multitenant apps
Entra ID · StandardsThe validation guidance now addresses both application models, with configuration-specific endpoint requirements and eligibility guidance. Teams should use the section matching their architecture and verify scopes, endpoints, and redirect URIs.
- Entitlement Management Reports guidance separates API and portal review paths
ID Governance · GovernanceThe reports page now links to the Microsoft Graph accessDriftSummary API and separately identifies review through the Microsoft Entra admin center.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
8 updates
Microsoft Entra ID
4 updatesThe page author and manager metadata were changed.
The document author was changed from hkinyunyu to HildaK-pm.
Microsoft Defender for Cloud Apps will update App Governance permissions for select Microsoft Entra roles starting mid-November 2026. Changes include role-based access control alignment with Defender XDR, affecting Cloud App Security, Compliance Administrator, and Compliance Data Administrator roles. Admins should review and update role assignments accordingly.
Microsoft Entra ID Governance
2 updatesEntitlement Management Reports
Doc updateThe documentation now links to the Microsoft Graph accessDriftSummary API and separately identifies review through the Microsoft Entra admin center. The page date was also updated.
Entitlement Management Reports
Doc updateThe entitlement management reports documentation now uses an updated link for the List accessDriftSummary API.
Microsoft Entra External ID
1 updateA new article compares three identity verification patterns: Verified ID credentials, direct REST API claims, and OIDC federation. It explains partner-based proofing, External ID authentication, setup considerations, and handling of longer-running verification journeys.
Microsoft Entra Private Access
1 updateManage Private Access Profile
Doc updateThe documentation now notes that switching to v2 is non-reversible, while previous configurations carry over without changes to end-user traffic.