Daily.Entra.NewsThe period’s clearest administrator-impacting change is a Microsoft Entra retirement notice: new assignments to the Partner Tier1 and Tier2 Support roles will be blocked starting 3 August 2026, while existing assignments remain valid. The Learn entries are otherwise predominantly procedural or reference maintenance, with a connected set of Global Secure Access tutorials, substantive ID Protection risk-signal documentation, and OIDC security guidance as the main exceptions. The supplied evidence does not identify a general-availability release for those new pages; HTTP method request filtering is explicitly marked preview. The removed Entra Customer Lockbox Approver item is identified only as a page removal, not as evidence of a corresponding capability retirement.
Entra ID · GovernanceMicrosoft Entra’s Message Center notice says the Partner Tier1 and Partner Tier2 Support roles are being retired. Starting 3 August 2026, new assignments will be blocked, but existing assignments remain valid. The notice specifically calls for updating scripts and using alternatives such as User Administrator; tenants that do not use these roles are unaffected. This is the period’s concrete retirement and behavior change.
Global Secure Access · FundamentalsNew tutorials cover enabling the Microsoft traffic profile, assigning users, installing the client, and verifying traffic forwarding; enabling source IP restoration and checking Microsoft Entra sign-in logs; requiring a compliant network through Conditional Access; and configuring universal tenant restrictions. A separate Microsoft traffic labs tutorial groups source IP restoration, compliant network checks, and tenant restrictions. These are procedural Learn additions, not an announced GA release or product launch
Global Secure Access · GeneralAn updated Global Secure Access web-content-filtering page explicitly lists HTTP method request filtering as preview, with GET, POST, PUT, PATCH, and DELETE as examples of methods that can be blocked or allowed. Related content-policy documentation describes real-time protection for file and text content. No GA date or broader availability statement is supplied.
ID Protection · FundamentalsNew and updated ID Protection pages describe unified risk signals: correlated identity-risk signals from Entra ID Protection, Microsoft Defender, and other Microsoft security products are evaluated within the same time window to calculate a compounded user-risk score. The Risky User Report update documents an `Aggregate risk signals by risky sign-ins` option, and the dashboard documentation carries the same model. The record does not label this as preview or GA.
Entra ID · StandardsA new OIDC extensibility reference maps each Microsoft identity platform OIDC extensibility surface to the relevant configuration article and Microsoft Graph resource. Related Entra ID updates say the implicit-flow ID-token manifest flag defaults to false, discourage implicit grant even for JavaScript SPAs, and recommend authorization code flow with PKCE; OIDC setup guidance also reiterates adding a redirect URI. This is security and developer guidance, not an announced protocol-enforcement change.
If these partner roles are used, update scripts that make future assignments and select alternatives such as User Administrator before 3 August. Existing assignments remain valid, and tenants that do not use the roles are unaffected. Use the new Global Secure Access pages as configuration and validation procedures, but do not treat their new-document status as proof of a launch or GA availability; treat HTTP method filtering as preview. Analysts using ID Protection reports should account for the documented correlation of signals and the risky-user report aggregation option, without assuming a new policy requirement. Application owners should review SPA registrations that rely on implicit grant against the documented authorization-code-with-PKCE guidance; the evidence does not say that En.{
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Specifies whether this web app can request OAuth2.0 implicit flow ID tokens. The default is false. This flag is used for browser-based apps, like JavaScript single-page apps. We, however, discourage the use of implicit grant even in SPAs and recommend using the [authorization code flow](./v2-oauth2-auth-code-flow.md) with PKCE.
Map each Microsoft identity platform OpenID Connect (OIDC) extensibility surface to the configuration article and the Microsoft Graph API resource that programs it.
Sign in Microsoft Entra users by using the Microsoft identity platform's implementation of the OpenID Connect extension to OAuth 2.0.
- **Cost:** See [API call pricing](https://aka.ms/EntraSCIMAPIPricing).
Before you can call the SCIM API endpoints described in this article, you must enable the SCIM Provisioning API feature, configure billing, set up credentials, and obtain an access token. For step-by-step instructions, see [Enable the SCIM Provisioning API in Microsoft Entra ID](enable-scim-api.md).
Global Administrator
Describes the Microsoft Entra built-in roles and permissions.
A Microsoft Entra documentation page was updated: Entra Customer Lockbox Approver.
| App or service | Limitations |
Learn how Microsoft Entra Connect matches and synchronizes on-premises objects with an existing Microsoft Entra tenant, and how to resolve hard match conflicts.
> [!NOTE]
Learn how to configure Microsoft Entra ID to automatically provision and deprovision user accounts to Harness.
Learn how to automatically provision and deprovision user accounts from Microsoft Entra ID to Visa Spend Clarity for Enterprise.
1. Under Redirect URIs, add the redirect URI of your application. For example, `https://localhost:8080/`.
This article shows the new and updated documentation for the Microsoft Entra application management.
| `logoUrl` | Relocated as a property of the `info` attribute |
How to choose the right method for accessing and integrating the activity logs in Microsoft Entra ID.
ai-usage: ai-assisted
- The object or property isn't supported for preview in the current release.
Learn about OAuth 2.0 and OpenID Connect in Microsoft identity platform. Explore authentication flows, endpoints, and secure user authentication.
- [Office 365 app in Conditional Access](concept-conditional-access-cloud-apps.md#office-365)
Microsoft Entra will block new assignments to Partner Tier1 and Tier2 Support roles starting August 3, 2026, as these roles are retired. Existing assignments remain valid. Admins should update scripts and use alternative roles like User Administrator. No impact if these roles aren't used.
To see risk sign-in events together with risky user events, select the **Aggregate risk signals by risky sign-ins** checkbox.
Learn how unified risk signals correlate identity risk across Microsoft Entra ID Protection and Microsoft Defender to calculate compounded user risk.
Microsoft Entra ID Protection provides unified risk signals that aggregate correlated risk signals from Microsoft Entra ID Protection, Microsoft Defender, and other Microsoft security products. Instead of evaluating alerts in isolation, this capability correlates identity-related signals across products and evaluates them together within the same time window to calculate a compounded user risk score.
Learn about governance policy templates and how to use them to enforce consistent governance across tenants in Microsoft Entra
| South India | Chennai, India | ✅ | ✅ |
- **HTTP method request filtering (preview)**: Block or allow specific HTTP methods, such as GET, POST, PUT, PATCH, and DELETE.
Learn how to enable the Microsoft traffic profile in Global Secure Access, assign users, install the client, and verify traffic forwarding.
Learn about Microsoft traffic labs for Global Secure Access, including source IP restoration, compliant network checks, and universal tenant restrictions.
Learn how to configure universal tenant restrictions with Global Secure Access for Microsoft traffic.
Learn how to enable source IP restoration for Microsoft traffic in Global Secure Access and validate Microsoft Entra sign-in logs.
Learn how to configure a Conditional Access policy that requires a compliant network with Global Secure Access.
- [Global Secure Access traffic forwarding profiles](concept-traffic-forwarding.md)
Discover how to configure network content filtering with Global Secure Access to enforce data protection policies for files and text content in real time.
Learn how to review and apply suggestions provided by the Security Copilot for Microsoft Entra optimization agent.
