📋 Microsoft Entra Documentation Changes

Changes for April 27th 2025

Period: April 26th 2025, 12:00 AM to April 27th 2025, 12:00 AM

📚 Historical Report: This report shows documentation changes that occurred during the 24-hour period ending on April 27th 2025.

📊 Summary

80
Total Commits
1
New Files
2571
Modified Files
0
Deleted Files
21
Contributors

🆕 New Documentation Files

NEW docs/identity-platform/saml-claims-customization.md
Added by Gearoid O'Donnell on Apr 26, 2025 1:26 AM
📖 View on learn.microsoft.com
+275 lines added
Commit: Re-adding file

📝 Modified Documentation Files

MODIFIED docs/identity/saas-apps/blinq-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:39 PM
📖 View on learn.microsoft.com
+49 / -49 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
 
|Attribute|Type|Supported for filtering|Required by Blinq|
|---|---|---|---|
|userName|String|✓|✓
|active|Boolean||
|displayName|String||
|nickName|String||
|title|String||
|preferredLanguage|String||
|locale|String||
|timezone|String||
|name.givenName|String||
|name.familyName|String||
|name.formatted|String||
|name.middleName|String||
|name.honorificPrefix|String||
|name.honorificSuffix|String||
|externalId|String||
|emails[type eq "work"].value|String||
|emails[type eq "home"].value|String||
 
|Attribute|Type|Supported for filtering|Required by Blinq|
|---|---|---|---|
|userName|String|✓|✓|
|active|Boolean|||
|displayName|String|||
|nickName|String|||
|title|String|||
|preferredLanguage|String|||
|locale|String|||
|timezone|String|||
|name.givenName|String|||
|name.familyName|String|||
|name.formatted|String|||
|name.middleName|String|||
|name.honorificPrefix|String|||
|name.honorificSuffix|String|||
|externalId|String|||
|emails[type eq "work"].value|String|||
|emails[type eq "home"].value|String|||
MODIFIED docs/identity/saas-apps/britive-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:39 PM
📖 View on learn.microsoft.com
+49 / -49 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
 
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓
|active|Boolean|
|displayName|String|
|title|String|
|externalId|String|
|preferredLanguage|String|
|name.givenName|String|
|name.familyName|String|
|nickName|String|
|userType|String|
|locale|String|
|timezone|String|
|emails[type eq "home"].value|String|
|emails[type eq "other"].value|String|
|emails[type eq "work"].value|String|
|phoneNumbers[type eq "home"].value|String|
|phoneNumbers[type eq "other"].value|String|
 
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean||
|displayName|String||
|title|String||
|externalId|String||
|preferredLanguage|String||
|name.givenName|String||
|name.familyName|String||
|nickName|String||
|userType|String||
|locale|String||
|timezone|String||
|emails[type eq "home"].value|String||
|emails[type eq "other"].value|String||
|emails[type eq "work"].value|String||
|phoneNumbers[type eq "home"].value|String||
|phoneNumbers[type eq "other"].value|String||
MODIFIED docs/external-id/tenant-restrictions-v2.md
Modified by vimrang on Apr 26, 2025 10:20 AM
📖 View on learn.microsoft.com
+81 / -11 lines changed
Commit: Update tenant-restrictions-v2.md
Changes:
Before
After
 
1. Select **OK**.
 
#### Block Chrome, Firefox and .NET applications like PowerShell
 
You can use the Windows Firewall feature to block unprotected apps from accessing Microsoft resources via Chrome, Firefox, and .NET applications like PowerShell. The applications that would be blocked/allowed as per the tenant restrictions v2 policy.
 
 
:::image type="content" source="media/tenant-restrictions-v2/cloud-policy-block.png" alt-text="Screenshot showing enabling the firewall policy.":::
 
After you enable the firewall setting, try signing in using a Chrome browser. Sign-in should fail with the following message:
:::image type="content" source="media/tenant-restrictions-v2/end-user-access-blocked.png" alt-text="Screenshot showing internet access is blocked.":::
 
#### View tenant restrictions v2 events
 
View events related to tenant restrictions in Event Viewer.
 
1. In Event Viewer, open **Applications and Services Logs**.
1. Navigate to **Microsoft** > **Windows** > **TenantRestrictions** > **Operational** and look for events.
 
1. Select **OK**.
 
#### View tenant restrictions v2 events
 
View events related to tenant restrictions in Event Viewer.
 
1. In Event Viewer, open **Applications and Services Logs**.
1. Navigate to **Microsoft** > **Windows** > **TenantRestrictions** > **Operational** and look for events.
## Block Chrome, Firefox and .NET applications like PowerShell
 
To block you need to enable Windows firewall setting as well as set up Windows Defender Application Control (WDAC)
 
### Set up Windows Defender Application Control (WDAC) to control access to Microsoft resources
 
Windows Defender Application Control (WDAC) is a policy engine built into Windows that allows you to control which applications can be run on your user’s devices. For tenant restrictions v2, you need to use WDAC to block “unenlightened apps” (those that don’t provide TRv2 protection) from accessing Microsoft resources. This allows you to keep using the browsers and apps of your choice, while knowing that any access to data protected by Entra can only be accessed through secure means.
 
“Unenlightened apps” are apps that do not use the Windows networking stack, and therefore do not benefit from the TRv2 features added to Windows. They cannot send the signal to Entra login.live.com, or Microsoft resources that indicates that TRv2 protection is required. As such, you cannot rely on them to provide data plane protections.
 
MODIFIED docs/identity/saas-apps/cofense-provision-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:45 PM
📖 View on learn.microsoft.com
+37 / -37 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
|Attribute|Type|Supported for filtering|
|---|---|---|
|externalId|String|✓|
|userName|String|
|active|Boolean|
|displayName|String|
|name.formatted|String|
|name.givenName|String|
|name.familyName|String|
|name.honorificSuffix|String|
|phoneNumbers[type eq "work"].value|String|
|phoneNumbers[type eq "home"].value|String|
|phoneNumbers[type eq "other"].value|String|
|phoneNumbers[type eq "pager"].value|String|
|phoneNumbers[type eq "mobile"].value|String|
|phoneNumbers[type eq "fax"].value|String|
|addresses[type eq "other"].formatted|String|
|addresses[type eq "work"].formatted|String|
|addresses[type eq "work"].streetAddress|String|
|addresses[type eq "work"].locality|String|
|Attribute|Type|Supported for filtering|
|---|---|---|
|externalId|String|✓|
|userName|String||
|active|Boolean||
|displayName|String||
|name.formatted|String||
|name.givenName|String||
|name.familyName|String||
|name.honorificSuffix|String||
|phoneNumbers[type eq "work"].value|String||
|phoneNumbers[type eq "home"].value|String||
|phoneNumbers[type eq "other"].value|String||
|phoneNumbers[type eq "pager"].value|String||
|phoneNumbers[type eq "mobile"].value|String||
|phoneNumbers[type eq "fax"].value|String||
|addresses[type eq "other"].formatted|String||
|addresses[type eq "work"].formatted|String||
|addresses[type eq "work"].streetAddress|String||
|addresses[type eq "work"].locality|String||
MODIFIED docs/identity/saas-apps/axiad-cloud-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 9:17 AM
📖 View on learn.microsoft.com
+27 / -27 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
 
|Attribute|Type|Supported for filtering|Required by Axiad Cloud|
|---|---|---|---|
|userName|String|✓|✓
|externalId|String|✓|✓
|active|Boolean||✓
|displayName|String||
|title|String||
|emails[type eq "work"].value|String||
|preferredLanguage|String||
|name.givenName|String||
|name.familyName|String||
|name.formatted|String||
|addresses[type eq "work"].formatted|String||
|addresses[type eq "work"].streetAddress|String||
|addresses[type eq "work"].locality|String||
|addresses[type eq "work"].region|String||
|addresses[type eq "work"].postalCode|String||
|addresses[type eq "work"].country|String||
|phoneNumbers[type eq "work"].value|String||
 
|Attribute|Type|Supported for filtering|Required by Axiad Cloud|
|---|---|---|---|
|userName|String|✓|✓|
|externalId|String|✓|✓|
|active|Boolean||✓|
|displayName|String|||
|title|String|||
|emails[type eq "work"].value|String|||
|preferredLanguage|String|||
|name.givenName|String|||
|name.familyName|String|||
|name.formatted|String|||
|addresses[type eq "work"].formatted|String|||
|addresses[type eq "work"].streetAddress|String|||
|addresses[type eq "work"].locality|String|||
|addresses[type eq "work"].region|String|||
|addresses[type eq "work"].postalCode|String|||
|addresses[type eq "work"].country|String|||
|phoneNumbers[type eq "work"].value|String|||
MODIFIED docs/identity/saas-apps/aws-single-sign-on-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 9:17 AM
📖 View on learn.microsoft.com
+26 / -26 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
|Attribute|Type|Supported for Filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean|
|displayName|String|
|title|String|
|emails[type eq "work"].value|String|
|preferredLanguage|String|
|name.givenName|String|
|name.familyName|String|
|name.formatted|String|
|addresses[type eq "work"].formatted|String|
|addresses[type eq "work"].streetAddress|String|
|addresses[type eq "work"].locality|String|
|addresses[type eq "work"].region|String|
|addresses[type eq "work"].postalCode|String|
|addresses[type eq "work"].country|String|
|phoneNumbers[type eq "work"].value|String|
|externalId|String|
|locale|String|
|Attribute|Type|Supported for Filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean||
|displayName|String||
|title|String||
|emails[type eq "work"].value|String||
|preferredLanguage|String||
|name.givenName|String||
|name.familyName|String||
|name.formatted|String||
|addresses[type eq "work"].formatted|String||
|addresses[type eq "work"].streetAddress|String||
|addresses[type eq "work"].locality|String||
|addresses[type eq "work"].region|String||
|addresses[type eq "work"].postalCode|String||
|addresses[type eq "work"].country|String||
|phoneNumbers[type eq "work"].value|String||
|externalId|String||
|locale|String||
MODIFIED docs/identity/saas-apps/alvao-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 9:17 AM
📖 View on learn.microsoft.com
+26 / -25 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
 
|Attribute|Type|Supported for filtering|Required by ALVAO|
|---|---|---|---|
|userName|String|✓|✓
|externalId|String|✓|✓
|active|Boolean||✓
|displayName|String||✓
|title|String||
|emails[type eq "work"].value|String||
|name.givenName|String||
|name.familyName|String||
|name.formatted|String||
|addresses[type eq "work"].formatted|String||
|addresses[type eq "work"].locality|String||
|addresses[type eq "work"].region|String||
|addresses[type eq "work"].country|String||
|addresses[type eq "work"].postalCode|String||
|addresses[type eq "work"].streetAddress|String||
|phoneNumbers[type eq "work"].value|String||
|phoneNumbers[type eq "mobile"].value|String||
 
|Attribute|Type|Supported for filtering|Required by ALVAO|
|---|---|---|---|
|userName|String|✓|✓|
|externalId|String|✓|✓|
|active|Boolean||✓|
|displayName|String||✓|
|title|String|||
|emails[type eq "work"].value|String|||
|name.givenName|String|||
|name.familyName|String|||
|name.formatted|String|||
|addresses[type eq "work"].formatted|String|||
|addresses[type eq "work"].locality|String|||
|addresses[type eq "work"].region|String|||
|addresses[type eq "work"].country|String|||
|addresses[type eq "work"].postalCode|String|||
|addresses[type eq "work"].streetAddress|String|||
|phoneNumbers[type eq "work"].value|String|||
|phoneNumbers[type eq "mobile"].value|String|||
MODIFIED docs/fundamentals/entra-admin-center.md
Modified by jason-nydegger on Apr 26, 2025 8:40 AM
📖 View on learn.microsoft.com
+21 / -26 lines changed
Commit: new left-nav screenshots
Changes:
Before
After
ms.service: entra
ms.subservice: fundamentals
ms.topic: overview
ms.date: 11/08/2024
ms.author: janydegger
 
#Customer intent: As a user, I want an overview of the products and features available in the Microsoft Entra admin center and then be able to easily navigate to learn more about those products and features.
 
## Explore the Microsoft Entra admin center
 
The Microsoft Entra admin center is organized by product. The products can be accessed through the search bar, left-hand menu, or the **View all products** pop-up menu.
 
:::image type="content" source="./media/entra-admin-center/entra-admin-center-home.png" alt-text="Screenshot of the Microsoft Entra admin center overview home page.":::
 
The following sections provide a high-level overview of the product interfaces and links to learn more about the features.
 
### What's new
 
**What's new** provides information about the latest updates to the Microsoft Entra product categorized into **Highlights**, **Roadmap**, and **Change announcements**.
 
ms.service: entra
ms.subservice: fundamentals
ms.topic: overview
ms.date: 04/25/2025
ms.author: janydegger
 
#Customer intent: As a user, I want an overview of the products and features available in the Microsoft Entra admin center and then be able to easily navigate to learn more about those products and features.
 
## Explore the Microsoft Entra admin center
 
The Microsoft Entra admin center is organized by product. The products can be accessed through the search bar or left-hand menu.
 
**Home** includes at-a-glance information about your tenant, recent activities, and other helpful resources, including shortcuts and deployment guides.
:::image type="content" source="./media/entra-admin-center/entra-admin-center-home.png" alt-text="Screenshot of the Microsoft Entra admin center overview home page.":::
 
The following sections provide a high-level overview of the product interfaces and links to learn more about the features.
 
### Entra ID
 
MODIFIED docs/identity/saas-apps/bis-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:39 PM
📖 View on learn.microsoft.com
+23 / -23 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
 
|Attribute|Type|Supported for filtering|Required by BIS|
|---|---|---|---|
|userName|String|✓|✓
|active|Boolean||✓
|emails[type eq "work"].value|String||
|name.givenName|String||✓
|name.familyName|String||✓
|addresses[type eq "work"].streetAddress|String||
|addresses[type eq "work"].locality|String||
|addresses[type eq "work"].region|String||✓
|addresses[type eq "work"].postalCode|String||
|addresses[type eq "work"].country|String||✓
|phoneNumbers[type eq "work"].value|String||
|phoneNumbers[type eq "mobile"].value|String||
|externalId|String||
|title|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber|String||✓
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager|String||
 
|Attribute|Type|Supported for filtering|Required by BIS|
|---|---|---|---|
|userName|String|✓|✓|
|active|Boolean||✓|
|emails[type eq "work"].value|String|||
|name.givenName|String||✓|
|name.familyName|String||✓|
|addresses[type eq "work"].streetAddress|String|||
|addresses[type eq "work"].locality|String|||
|addresses[type eq "work"].region|String||✓|
|addresses[type eq "work"].postalCode|String|||
|addresses[type eq "work"].country|String||✓|
|phoneNumbers[type eq "work"].value|String|||
|phoneNumbers[type eq "mobile"].value|String|||
|externalId|String|||
|title|String|||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber|String||✓|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String|||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager|String|||
MODIFIED docs/identity/saas-apps/cybsafe-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:49 PM
📖 View on learn.microsoft.com
+20 / -20 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean|
|displayName|String|
|title|String|
|preferredLanguage|String|
|name.givenName|String|
|name.familyName|String|
|name.formatted|String|
|name.honorificPrefix|String|
|name.honorificSuffix|String|
|nickName|String|
|phoneNumbers[type eq "mobile"].value|String|
|emails[type eq "work"].value|String|
|locale|String|
|timezone|String|
|userType|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division|String|
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean||
|displayName|String||
|title|String||
|preferredLanguage|String||
|name.givenName|String||
|name.familyName|String||
|name.formatted|String||
|name.honorificPrefix|String||
|name.honorificSuffix|String||
|nickName|String||
|phoneNumbers[type eq "mobile"].value|String||
|emails[type eq "work"].value|String||
|locale|String||
|timezone|String||
|userType|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division|String||
MODIFIED docs/identity/saas-apps/facebook-work-accounts-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:49 PM
📖 View on learn.microsoft.com
+20 / -20 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
 
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓
|externalId|String|
|active|Boolean|
|title|String|
|emails[type eq "work"].value|String|
|preferredLanguage|String|
|name.givenName|String|
|name.familyName|String|
|name.formatted|String|
|addresses[type eq "work"].formatted|String|
|addresses[type eq "work"].streetAddress|String|
|addresses[type eq "work"].locality|String|
|addresses[type eq "work"].region|String|
|addresses[type eq "work"].postalCode|String|
|addresses[type eq "work"].country|String|
|phoneNumbers[type eq "work"].value|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber|String|
 
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|externalId|String||
|active|Boolean||
|title|String||
|emails[type eq "work"].value|String||
|preferredLanguage|String||
|name.givenName|String||
|name.familyName|String||
|name.formatted|String||
|addresses[type eq "work"].formatted|String||
|addresses[type eq "work"].streetAddress|String||
|addresses[type eq "work"].locality|String||
|addresses[type eq "work"].region|String||
|addresses[type eq "work"].postalCode|String||
|addresses[type eq "work"].country|String||
|phoneNumbers[type eq "work"].value|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber|String||
MODIFIED docs/identity/saas-apps/bpanda-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:39 PM
📖 View on learn.microsoft.com
+18 / -18 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
 
|Attribute|Type|Supported for Filtering|
|---|---|---|
|userName|String|✓
|active|Boolean|
|displayName|String|
|emails[type eq "work"].value|String|
|name.givenName|String|
|name.familyName|String|
|phoneNumbers[type eq "work"].value|String|
|phoneNumbers[type eq "mobile"].value|String|
|externalId|String|
|title|String|
|preferredLanguage|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:organization|String|
 
 
10. Under the **Mappings** section, select **Synchronize Microsoft Entra groups to Bpanda**.
 
|Attribute|Type|Supported for Filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean||
|displayName|String||
|emails[type eq "work"].value|String||
|name.givenName|String||
|name.familyName|String||
|phoneNumbers[type eq "work"].value|String||
|phoneNumbers[type eq "mobile"].value|String||
|externalId|String||
|title|String||
|preferredLanguage|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:organization|String||
 
 
10. Under the **Mappings** section, select **Synchronize Microsoft Entra groups to Bpanda**.
MODIFIED docs/identity/devices/macos-psso.md
Modified by Michael Epping on Apr 26, 2025 6:29 AM
📖 View on learn.microsoft.com
+34 / -1 lines changed
Commit: UserSecureEnclaveKeyBiometricPolicy Details
Changes:
Before
After
 
* A recommended minimum version of macOS 14 Sonoma. While macOS 13 Ventura is supported, we strongly recommend using macOS 14 Sonoma for the best experience.
* [Microsoft Authenticator](https://support.microsoft.com/account-billing/how-to-use-the-microsoft-authenticator-app-9783c865-0308-42fb-a519-8cf666fe0acc)
 
* Microsoft Intune [Company Portal app](/mem/intune/apps/apps-company-portal-macos) version 5.2404.0 or later installed. This version is required before users are targeted for PSSO.
 
## Configuration
 
 
Platform Credential for macOS can also be used as a phishing resistant credential for use in WebAuthn challenges (including browser re-auth scenarios). Admins will need to enable the FIDO2 security key authentication method for this capability. If you leverage Key Restriction Policies in your FIDO policy then you will need to add the AAGUID for the macOS Platform Credential to your list of allowed AAGUIDs: `7FD635B3-2EF9-4542-8D9D-164F2C771EFC`
 
## National Institute of Standards and Technology (NIST)
 
The National Institute of Standards and Technology (NIST) is a non-regulatory federal agency within the U.S. Department of Commerce. NIST develops and issues standards, guidelines, and other publications to assist federal agencies in managing cost-effective programs to protect their information and information systems.
 
 
 
 
 
 
 
* A recommended minimum version of macOS 14 Sonoma. While macOS 13 Ventura is supported, we strongly recommend using macOS 14 Sonoma for the best experience.
* [Microsoft Authenticator](https://support.microsoft.com/account-billing/how-to-use-the-microsoft-authenticator-app-9783c865-0308-42fb-a519-8cf666fe0acc)
* Microsoft Intune [Company Portal app](/mem/intune/apps/apps-company-portal-macos) version 5.2404.0 or later installed. This version is required before users are targeted for PSSO.
* Users must have sufficient permissions to [register and join devices to Microsoft Entra ID](/identity/devices/troubleshoot-macos-platform-single-sign-on-extension?tabs=macOS14#insufficient-permissions).
 
## Configuration
 
 
Platform Credential for macOS can also be used as a phishing resistant credential for use in WebAuthn challenges (including browser re-auth scenarios). Admins will need to enable the FIDO2 security key authentication method for this capability. If you leverage Key Restriction Policies in your FIDO policy then you will need to add the AAGUID for the macOS Platform Credential to your list of allowed AAGUIDs: `7FD635B3-2EF9-4542-8D9D-164F2C771EFC`
 
### Microsoft Platform SSO: UserSecureEnclaveKeyBiometricPolicy
 
Microsoft Platform SSO has introduced support for the [UserSecureEnclaveKeyBiometricPolicy](https://developer.apple.com/documentation/authenticationservices/asauthorizationproviderextensionloginconfiguration/usersecureenclavekeybiometricpolicy) when using Platform SSO with the UserSecureEnclaveKey authentication method. This policy enhances security by requiring users to authenticate with Touch ID whenever the User Secure Enclave Key needs to be accessed.
 
- When this policy is enabled, users will be prompted for Touch ID authentication whenever the User Secure Enclave Key is accessed. This includes during PSSO registration, browser re-authentication scenarios using the user key as a passkey, and authentication during login to obtain the PSSO token.
- Enabling this policy requires that the device supports Touch ID biometric authentication. Users will need to configure Touch ID to proceed with PSSO registration. Administrators should ensure that users have a biometric-supported device or an external keyboard supporting Touch ID before enabling this policy.
 
#### Requirements for UserSecureEnclaveKeyBiometricPolicy
 
MODIFIED docs/identity/saas-apps/exium-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:49 PM
📖 View on learn.microsoft.com
+17 / -17 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|displayName|String|
|active|Boolean|
|emails[type eq "work"].value|String|
|name.givenName|String|
|name.familyName|String|
|addresses[type eq "work"].streetAddress|String|
|addresses[type eq "work"].locality|String|
|addresses[type eq "work"].region|String|
|addresses[type eq "work"].postalCode|String|
|addresses[type eq "work"].country|String|
|phoneNumbers[type eq "work"].value|String|
|externalId|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String|
|timezone|String|
|userType|String|
 
10. Under the **Mappings** section, select **Synchronize Microsoft Entra groups to Exium**.
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|displayName|String||
|active|Boolean||
|emails[type eq "work"].value|String||
|name.givenName|String||
|name.familyName|String||
|addresses[type eq "work"].streetAddress|String||
|addresses[type eq "work"].locality|String||
|addresses[type eq "work"].region|String||
|addresses[type eq "work"].postalCode|String||
|addresses[type eq "work"].country|String||
|phoneNumbers[type eq "work"].value|String||
|externalId|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String||
|timezone|String||
|userType|String||
 
10. Under the **Mappings** section, select **Synchronize Microsoft Entra groups to Exium**.
MODIFIED docs/identity/saas-apps/blink-provisioning-tutorial.md
Modified by Arie Heinrich on Apr 26, 2025 5:39 PM
📖 View on learn.microsoft.com
+16 / -16 lines changed
Commit: Spelling - Remove spaces MD038 - Add table separators MD 055 - 056
Changes:
Before
After
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean|
|title|String|
|emails[type eq "work"].value|String|
|name.givenName|String|
|name.familyName|String|
|phoneNumbers[type eq "work"].value|String|
|phoneNumbers[type eq "mobile"].value|String|
|externalId|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber|String|
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager|Reference|
|urn:ietf:params:scim:schemas:extension:blink:2.0:User:company|String|
urn:ietf:params:scim:schemas:extension:blink:2.0:User:description|String|
urn:ietf:params:scim:schemas:extension:blink:2.0:User:location|String|
 
10. To configure scoping filters, refer to the following instructions provided in the [Scoping filter article](~/identity/app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
 
|Attribute|Type|Supported for filtering|
|---|---|---|
|userName|String|✓|
|active|Boolean||
|title|String||
|emails[type eq "work"].value|String||
|name.givenName|String||
|name.familyName|String||
|phoneNumbers[type eq "work"].value|String||
|phoneNumbers[type eq "mobile"].value|String||
|externalId|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber|String||
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager|Reference||
|urn:ietf:params:scim:schemas:extension:blink:2.0:User:company|String||
|urn:ietf:params:scim:schemas:extension:blink:2.0:User:description|String||
|urn:ietf:params:scim:schemas:extension:blink:2.0:User:location|String||
 
10. To configure scoping filters, refer to the following instructions provided in the [Scoping filter article](~/identity/app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
 

🤖 This historical report was generated by the Entra Docs Monitor

🔗 Visit Repository

📅 ← Back to All Reports