Microsoft Entra Documentation Changes

MODIFIED docs/identity/hybrid/connect/authenticate-application-id.md

Modified by owinoakelo on May 19, 2025 3:45 AM
📖 View on learn.microsoft.com

+18 / -9 lines changed

Commit: Update authenticate-application-id.md

Changes:

Before

After

 
 :::image type="content" source="media/authenticate-application-id/auth-1.png" alt-text="Diagram of authentication with application ID." lightbox="media/authenticate-application-id/auth-1.png":::
 
Microsoft recommends the Entra Connect certificate management option as we manage the keys and automatically rotate the certificate on expiry. This behavior is the default option in Entra Connect Sync versions equal to or higher than 2.4.252.0. 
 
> [!NOTE]
> We use the maintenance task to check if the certificate is due for rotation and automatically rotate the certificate, so if the scheduler is suspended or maintenance task is disabled, auto rotation won't happen even though the certificate is managed by Entra Connect Sync.
 ## Bring Your Own Application (BYOA) 
 
In this set up, the customer administrator manages the application that is used by Entra Connect Sync to authenticate to Entra, the application permissions and certificate credential used by the application. The administrator [registers a Microsoft Entra app and creates a service principal.](/graph/tutorial-applications-basics?tabs=http#register-an-application-with-microsoft-entra-id). The application should be assigned the required [permissions](#microsoft-graph-permissions-for-byoa)
 
## Bring Your Own Certificate (BYOC) 
 
>
> Following up on our earlier [What’s New](../../../fundamentals/whats-new.md#general-availability---download-microsoft-entra-connect-sync-on-the-microsoft-entra-admin-center) communication, new versions of Microsoft Entra Connect Sync are only available on the [Microsoft Entra Connect blade](https://entra.microsoft.com/#view/Microsoft_AAD_Connect_Provisioning/AADConnectMenuBlade/%7E/GetStarted) within Microsoft Entra Admin Center and will no longer be released to the [Microsoft Download Center](https://www.microsoft.com/en-us/download/details.aspx?id=47594).
 
- [Microsoft Entra Connect](https://www.microsoft.com/download/details.aspx?id=47594) version [2.4.252.0](reference-connect-version-history.md) or greater.
- Microsoft Entra account with at least a [Hybrid Identity Administrator](../../role-based-access-control/permissions-reference.md#hybrid-identity-administrator) role.
- On-premises Active Directory Domain Services environment with Windows Server 2016 operating system or later.
- Optional: TPM 2.0 present and ready to use (recommended for security)

 
 :::image type="content" source="media/authenticate-application-id/auth-1.png" alt-text="Diagram of authentication with application ID." lightbox="media/authenticate-application-id/auth-1.png":::
 
Microsoft recommends the Entra Connect certificate management option as we manage the keys and automatically rotate the certificate on expiry. This behavior is the default option in Entra Connect Sync versions equal to or higher than 2.5.2.0. 
 
> [!NOTE]
> We use the maintenance task to check if the certificate is due for rotation and automatically rotate the certificate, so if the scheduler is suspended or maintenance task is disabled, auto rotation won't happen even though the certificate is managed by Entra Connect Sync.
 ## Bring Your Own Application (BYOA) 
 
In this set up, the customer administrator manages the application that is used by Entra Connect Sync to authenticate to Entra, the application permissions and certificate credential used by the application. The administrator [registers a Microsoft Entra app and creates a service principal.](/graph/tutorial-applications-basics?tabs=http#register-an-application-with-microsoft-entra-id). The application should be assigned the required [permissions](#microsoft-graph-permissions-for-byoa)
The administrator is responsible for creating the certificate, rotation, and deletion of unused/expired certificates. The certificate must be stored in the Local Machine store. The administrator is responsible for securing the private key of the certificate and ensuring only Microsoft Azure AD Sync service can access the private key for signing
 
## Bring Your Own Certificate (BYOC) 
 
>
> Following up on our earlier [What’s New](../../../fundamentals/whats-new.md#general-availability---download-microsoft-entra-connect-sync-on-the-microsoft-entra-admin-center) communication, new versions of Microsoft Entra Connect Sync are only available on the [Microsoft Entra Connect blade](https://entra.microsoft.com/#view/Microsoft_AAD_Connect_Provisioning/AADConnectMenuBlade/%7E/GetStarted) within Microsoft Entra Admin Center and will no longer be released to the [Microsoft Download Center](https://www.microsoft.com/en-us/download/details.aspx?id=47594).
 
- [Microsoft Entra Connect](https://www.microsoft.com/download/details.aspx?id=47594) version [2.5.2.0](reference-connect-version-history.md) or greater.
- Microsoft Entra account with at least a [Hybrid Identity Administrator](../../role-based-access-control/permissions-reference.md#hybrid-identity-administrator) role.
- On-premises Active Directory Domain Services environment with Windows Server 2016 operating system or later.

MODIFIED docs/identity-platform/custom-extension-email-otp-send-data.md

Modified by Yoel Horvitz on May 19, 2025 11:26 PM
📖 View on learn.microsoft.com

+8 / -8 lines changed

Commit: Update custom-extension-email-otp-send-data.md

Changes:

Before

After

 
```json
{
  "data": {
    "actions": [
      {
        "@odata.type": "microsoft.graph.OtpSend.continueWithDefaultBehavior"
      }
    ],
    "@odata.type": "microsoft.graph.OnOtpSendResponseData"
  }
}
```
 

 
```json
{
    "data": {
        "@odata.type": "microsoft.graph.OnOtpSendResponseData",
        "actions": [
            {
                "@odata.type": "microsoft.graph.OtpSend.continueWithDefaultBehavior"
            }
        ]
    }
}
```
 

MODIFIED docs/identity/authentication/how-to-authentication-track-linkable-identifiers.md

Modified by Justinha on May 19, 2025 1:24 PM
📖 View on learn.microsoft.com

+8 / -8 lines changed

Commit: copyedits

Changes:

Before

After

 
For scenarios such as mailbox updates, item moves, or deletions, you can:
 
- Start with linkable identifiers, such as session ID (SID) or unique token identifier (UTI), from Microsoft Entra sign-in logs.
- Use these identifiers to search Microsoft Purview Audit (Standard) or Audit (Premium) logs.
- Track all user actions performed on mailbox items during a specific session or by a specific token.
 
 
For scenarios involving Microsoft Graph activity, you can:
 
- Start with linkable identifiers, such as SID or UTI, from Microsoft Entra sign-in logs.
- Use these identifiers to correlate and trace user actions across Microsoft Graph activity logs.
- Track all operations performed on mailbox items or other resources by a specific token or session see [Microsoft Graph Activity Logs](/graph/microsoft-graph-activity-logs-overview).
 
 
For scenarios involving SharePoint Online activity, you can:
 
- Start with linkable identifiers—such as Session ID (SID) or Unique Token Identifier (UTI)—from Microsoft Entra sign-in logs.
- Use these identifiers to search Microsoft Purview Audit (Standard) or Audit (Premium) logs.
- Track all user actions performed within SharePoint Online during a specific session or by a specific token.

 
For scenarios such as mailbox updates, item moves, or deletions, you can:
 
- Start with linkable identifiers from Microsoft Entra sign-in logs, such as session ID (SID) or unique token identifier (UTI).
- Use these identifiers to search Microsoft Purview Audit (Standard) or Audit (Premium) logs.
- Track all user actions performed on mailbox items during a specific session or by a specific token.
 
 
For scenarios involving Microsoft Graph activity, you can:
 
- Start with linkable identifiers from Microsoft Entra sign-in logs, such as SID or UTI.
- Use these identifiers to correlate and trace user actions across Microsoft Graph activity logs.
- Track all operations performed on mailbox items or other resources by a specific token or session see [Microsoft Graph Activity Logs](/graph/microsoft-graph-activity-logs-overview).
 
 
For scenarios involving SharePoint Online activity, you can:
 
- Start with linkable identifiers from Microsoft Entra sign-in logs, such as SID or UTI.
- Use these identifiers to search Microsoft Purview Audit (Standard) or Audit (Premium) logs.
- Track all user actions performed within SharePoint Online during a specific session or by a specific token.

MODIFIED docs/external-id/external-identities-pricing.md

Modified by csmulligan on May 19, 2025 9:19 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: B2C end of sale updates.

Changes:

Before

After

title: External ID pricing
description: Learn about the pricing structure for Microsoft Entra External ID. Understand the monthly active users (MAU) billing model, core offering, and premium add-ons. Link your tenant to an Azure subscription for proper billing and feature access.
 
 
ms.service: entra-external-id
ms.topic: concept-article
ms.date: 12/09/2024
 
ms.author: mimart
author: msmimart
 
- See [Frequently asked questions](customers/faq-customers.md) about external tenants.
- For the latest pricing information, see [Microsoft Entra External ID pricing](https://aka.ms/ExternalIDPricing).
- For details about Azure Active Directory B2C billing, see [Billing model for Azure Active Directory B2C](/azure/active-directory-b2c/billing).

title: External ID pricing
description: Learn about the pricing structure for Microsoft Entra External ID. Understand the monthly active users (MAU) billing model, core offering, and premium add-ons. Link your tenant to an Azure subscription for proper billing and feature access.
 
 
ms.service: entra-external-id
ms.topic: concept-article
ms.date: 05/19/2025
 
ms.author: mimart
author: msmimart
 
- See [Frequently asked questions](customers/faq-customers.md) about external tenants.
- For the latest pricing information, see [Microsoft Entra External ID pricing](https://aka.ms/ExternalIDPricing).
 

MODIFIED docs/fundamentals/licensing.md

Modified by csmulligan on May 19, 2025 9:19 PM
📖 View on learn.microsoft.com

+1 / -2 lines changed

Commit: B2C end of sale updates.

Changes:

Before

After

 
[!INCLUDE [features-preview](../includes/licensing-features-preview.md)]
 
## Next steps
 
- [Microsoft Entra pricing](https://www.microsoft.com/security/business/microsoft-entra-pricing)
- [Azure AD B2C pricing](https://azure.microsoft.com/pricing/details/active-directory-b2c/)

 
[!INCLUDE [features-preview](../includes/licensing-features-preview.md)]
 
## Related content
 
- [Microsoft Entra pricing](https://www.microsoft.com/security/business/microsoft-entra-pricing)

MODIFIED docs/identity/authentication/concept-mfa-licensing.md

Modified by csmulligan on May 19, 2025 9:19 PM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: B2C end of sale updates.

Changes:

Before

After

 
## Available versions of Microsoft Entra multifactor authentication
 
Microsoft Entra multifactor authentication can be used, and licensed, in a few different ways depending on your organization's needs. All tenants are entitled to basic multifactor authentication features by using security defaults. You may already be entitled to use advanced Microsoft Entra multifactor authentication depending on the license you currently have. For example, the first 50,000 monthly active users in Microsoft Entra External ID can use MFA and other Premium P1 or P2 features for free. For more information, see [Azure Active Directory B2C pricing](https://azure.microsoft.com/pricing/details/active-directory/external-identities/).
 
The following table details the different ways to get Microsoft Entra multifactor authentication and some of the features and use cases for each.

 
## Available versions of Microsoft Entra multifactor authentication
 
Microsoft Entra multifactor authentication can be used, and licensed, in a few different ways depending on your organization's needs. All tenants are entitled to basic multifactor authentication features by using security defaults. You may already be entitled to use advanced Microsoft Entra multifactor authentication depending on the license you currently have. For example, the first 50,000 monthly active users in Microsoft Entra External ID can use MFA and other Premium P1 or P2 features for free.
 
The following table details the different ways to get Microsoft Entra multifactor authentication and some of the features and use cases for each.

📋 Microsoft Entra Documentation Changes

📊 Summary

🆕 New Documentation Files

📝 Modified Documentation Files