📋 Microsoft Entra Documentation Changes

Changes for May 28th 2025

Period: May 27th 2025, 12:00 AM to May 28th 2025, 12:00 AM

📚 Historical Report: This report shows documentation changes that occurred during the 24-hour period ending on May 28th 2025.

📊 Summary

26
Total Commits
0
New Files
341
Modified Files
0
Deleted Files
11
Contributors

📝 Modified Documentation Files

+10 / -10 lines changed
Commit: Resolve comments
Changes:
Before
After
 
In this article, you learn how to Use Azure Front Door as a reverse proxy for a single-page app (SPA) that uses [native authentication API](/entra/identity-platform/reference-native-authentication-api?toc=/entra/external-id/toc.json&bc=/entra/external-id/breadcrumb/toc.json).
 
The native authentication API doesn't support Cross-Origin Resource Sharing (CORS). Therefore, a single-page app (SPA) that uses this API for user authentication can't make successful requests from front-end JavaScript code. To resolve this issue, you need to add a proxy server between the SPA and the native authentication API. This proxy server injects the appropriate CORS headers into the response.
 
In a production environment, we recommended using [Azure Front Door with a Standard/Premium subscription](/azure/frontdoor/standard-premium/troubleshoot-cross-origin-resources) as a reverse proxy.
 
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:
- You can use the React app described in [Quickstart: Sign in users into a sample React SPA by using native authentication API](quickstart-native-authentication-single-page-app-react-sign-in.md). However, don't configure or run the proxy server, as this guide covers that set up.
- Once you run the app, record the app URL for later use in this guide. In production, this URL contains the domain that you want to use as a custom domain URL, such as `http://www.contoso.com`
- Install [Azure Developer CLI (azd)](/azure/developer/azure-developer-cli/install-azd?tabs=winget-windows%2Cbrew-mac%2Cscript-linux&pivots=os-windows).
 
## Set up Azure Front Door as a reverse proxy
 
1. Familiarize yourself how to use Azure Front Door with CORS by reading through the article at [Using Azure Front Door Standard/Premium with CORS](/azure/frontdoor/standard-premium/troubleshoot-cross-origin-resources).
1. Use the instructions in [Enable custom URL domains for apps in external tenants](../external-id/customers/how-to-custom-url-domain.md) to add a custom domain name to your external tenant.
- For creating an Azure Front Door, [use azd template](#create-azure-front-door-as-a-reverse-proxy-using-an-azure-developer-cli-azd-template).
1. In your sample SPA, open the *API\React\ReactAuthSimple\src\config.ts* file, then replace the value of `BASE_API_URL`, *http://localhost:3001/api*, with `https://Enter_Custom_Domain_URL/Enter_the_Tenant_ID_Here`. Replace the placeholder:
 
 
In this article, you learn how to Use Azure Front Door as a reverse proxy for a single-page app (SPA) that uses [native authentication API](/entra/identity-platform/reference-native-authentication-api?toc=/entra/external-id/toc.json&bc=/entra/external-id/breadcrumb/toc.json).
 
The native authentication API doesn't support Cross-Origin Resource Sharing (CORS). Therefore, a single-page app (SPA) that uses this API for user authentication can't make successful requests from front-end JavaScript code. To resolve this issue, add a proxy server between the SPA and the native authentication API. The proxy server injects the appropriate CORS headers into the response.
 
In a production environment, we recommended using [Azure Front Door with a Standard/Premium subscription](/azure/frontdoor/standard-premium/troubleshoot-cross-origin-resources) as a reverse proxy.
 
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:
- You can use the React app described in [Quickstart: Sign in users into a sample React SPA by using native authentication API](quickstart-native-authentication-single-page-app-react-sign-in.md). However, don't configure or run the proxy server, as this guide covers that set up.
- After you run the app, record the app URL for later use in this guide. In production, this URL contains the domain that you want to use as a custom domain URL, such as `http://www.contoso.com`
- Install [Azure Developer CLI (azd)](/azure/developer/azure-developer-cli/install-azd?tabs=winget-windows%2Cbrew-mac%2Cscript-linux&pivots=os-windows).
 
## Set up Azure Front Door as a reverse proxy
 
1. Familiarize yourself with how to use Azure Front Door with CORS by reading the article at [Using Azure Front Door Standard/Premium with CORS](/azure/frontdoor/standard-premium/troubleshoot-cross-origin-resources).
1. Use the instructions in [Enable custom URL domains for apps in external tenants](../external-id/customers/how-to-custom-url-domain.md) to add a custom domain name to your external tenant.
- For creating an Azure Front Door, [use azd template](#create-azure-front-door-as-a-reverse-proxy-using-an-azure-developer-cli-azd-template).
1. In your sample SPA, open the *API\React\ReactAuthSimple\src\config.ts* file, then replace the value of `BASE_API_URL`, *http://localhost:3001/api*, with `https://Enter_Custom_Domain_URL/Enter_the_Tenant_ID_Here`. Replace the placeholder:
 
+11 / -8 lines changed
Commit: Resolve comments
Changes:
Before
After
## Prerequisites
 
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
- Register `Microsoft.App` resource provider, see [How to register resource provider](/azure/azure-resource-manager/management/resource-providers-and-types). This step only needs to be done once with newly created subscription.
- Install [Azure Developer CLI (azd)](/azure/developer/azure-developer-cli/install-azd?tabs=winget-windows%2Cbrew-mac%2Cscript-linux&pivots=os-windows).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:
- You can use the React app described in [Quickstart: Sign in users into a sample React SPA by using native authentication API](quickstart-native-authentication-single-page-app-react-sign-in.md). However, don't configure or run the proxy server, as this guide covers that set up.
 
## Create reverse proxy in an Azure function app by using Azure Developer CLI (azd) template
 
1. Initialize the azd template
 
```console
azd init --template https://github.com/azure-samples/ms-identity-extid-cors-proxy-function
 
When prompted, enter a name for the azd environment. This name is used as a prefix for the resource group so it should be unique within your Azure subscription.
 
1. Sign in to Azure
 
```console
## Prerequisites
 
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
- Register `Microsoft.App` resource provider, see [How to register resource provider](/azure/azure-resource-manager/management/resource-providers-and-types). You only need to complete this step once for each newly created subscription.
- Install [Azure Developer CLI (azd)](/azure/developer/azure-developer-cli/install-azd?tabs=winget-windows%2Cbrew-mac%2Cscript-linux&pivots=os-windows).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:
- You can use the React app described in [Quickstart: Sign in users into a sample React SPA by using native authentication API](quickstart-native-authentication-single-page-app-react-sign-in.md). However, don't configure or run the proxy server, as this guide covers that set up.
 
## Create reverse proxy in an Azure function app by using Azure Developer CLI (azd) template
 
1. To initialize the azd template, run the following command:
 
```console
azd init --template https://github.com/azure-samples/ms-identity-extid-cors-proxy-function
 
When prompted, enter a name for the azd environment. This name is used as a prefix for the resource group so it should be unique within your Azure subscription.
 
1. To sign into Azure, run the following command:
 
```console
+14 / -1 lines changed
Commit: Roles and permissions update
Changes:
Before
After
ms.service: entra-id
ms.subservice: role-based-access-control
ms.topic: reference
ms.date: 01/08/2025
ms.author: rolyon
ms.reviewer: abhijeetsinha
ms.custom: generated, it-pro, fasttrack-edit, has-azure-ad-ps-ref, azure-ad-ref-level-one-done, sfi-ga-nochange
> | microsoft.backup/restorePoints/userMailboxes/allProperties/allTasks | Manage all restore points associated with selected Exchange Online mailboxes in M365 Backup |
> | microsoft.backup/userMailboxProtectionUnits/allProperties/allTasks | Manage mailboxes added to Exchange Online protection policy in Microsoft 365 Backup |
> | microsoft.backup/userMailboxRestoreArtifacts/allProperties/allTasks | Manage mailboxes added to restore session for Exchange Online in Microsoft 365 Backup |
> | microsoft.directory/groups/hiddenMembers/read | Read hidden members of Security groups and Microsoft 365 groups, including role-assignable groups |
> | microsoft.directory/groups.unified/basic/update | Update basic properties on Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/create | Create Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/members/update | Update members of Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/owners/update | Update owners of Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/restore | Restore Microsoft 365 groups from soft-deleted container, excluding role-assignable groups |
> | microsoft.office365.exchange/allEntities/basic/allTasks | Manage all aspects of Exchange Online |
> | microsoft.office365.network/performance/allProperties/read | Read all network performance properties in the Microsoft 365 admin center |
> | microsoft.office365.serviceHealth/allEntities/allTasks | Read and configure Service Health in the Microsoft 365 admin center |
> | microsoft.insights/allEntities/allProperties/allTasks | Manage all aspects of Insights app |
ms.service: entra-id
ms.subservice: role-based-access-control
ms.topic: reference
ms.date: 05/26/2025
ms.author: rolyon
ms.reviewer: abhijeetsinha
ms.custom: generated, it-pro, fasttrack-edit, has-azure-ad-ps-ref, azure-ad-ref-level-one-done, sfi-ga-nochange
> | microsoft.backup/restorePoints/userMailboxes/allProperties/allTasks | Manage all restore points associated with selected Exchange Online mailboxes in M365 Backup |
> | microsoft.backup/userMailboxProtectionUnits/allProperties/allTasks | Manage mailboxes added to Exchange Online protection policy in Microsoft 365 Backup |
> | microsoft.backup/userMailboxRestoreArtifacts/allProperties/allTasks | Manage mailboxes added to restore session for Exchange Online in Microsoft 365 Backup |
> | microsoft.directory/contacts/allProperties/read | Read all properties for contacts |
> | microsoft.directory/contacts/memberOf/read | Read the group membership for all contacts in Microsoft Entra ID |
> | microsoft.directory/contacts/standard/read | Read basic properties on contacts in Microsoft Entra ID |
> | microsoft.directory/groups/hiddenMembers/read | Read hidden members of Security groups and Microsoft 365 groups, including role-assignable groups |
> | microsoft.directory/groups.unified/basic/update | Update basic properties on Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/create | Create Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/members/update | Update members of Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/owners/update | Update owners of Microsoft 365 groups, excluding role-assignable groups |
> | microsoft.directory/groups.unified/restore | Restore Microsoft 365 groups from soft-deleted container, excluding role-assignable groups |
> | microsoft.directory/onPremisesSynchronization/standard/read | Read standard on-premises directory synchronization information |
+4 / -3 lines changed
Commit: Addressing UUF 416185
Changes:
Before
After
manager: CelesteDG
ms.author: cwerner
ms.custom: subject-rbac-steps, devx-track-arm-template
ms.date: 05/14/2025
ms.service: identity-platform
 
ms.topic: how-to
You can set the scope at the level of the subscription, resource group, or resource. Permissions are inherited to lower levels of scope.
 
1. Sign in to the [Azure portal](https://portal.azure.com).
1. Select the level of scope you wish to assign the application to. For example, to assign a role at the subscription scope, search for and select **Subscriptions**. If you don't see the subscription you're looking for, select **global subscriptions filter**. Make sure the subscription you want is selected for the tenant.
1. Select **Access control (IAM)**.
1. Select **Add**, then select **Add role assignment**.
1. In the **Role** tab, select the role you wish to assign to the application in the list, then select **Next**.
1. On the **Members** tab, for **Assign access to**, select **User, group, or service principal**.
 
manager: CelesteDG
ms.author: cwerner
ms.custom: subject-rbac-steps, devx-track-arm-template
ms.date: 05/26/2025
ms.service: identity-platform
 
ms.topic: how-to
You can set the scope at the level of the subscription, resource group, or resource. Permissions are inherited to lower levels of scope.
 
1. Sign in to the [Azure portal](https://portal.azure.com).
1. In the search bar at the top of the screen, search for and select **Subscriptions**.
1. In the new window, select the subscription to want to modify. If you don't see the subscription you're looking for, select **global subscriptions filter**. Make sure the subscription you want is selected for the tenant.
1. In the left pane, select **Access control (IAM)**.
1. Select **Add**, then select **Add role assignment**.
1. In the **Role** tab, select the role you wish to assign to the application in the list, then select **Next**.
1. On the **Members** tab, for **Assign access to**, select **User, group, or service principal**.
+3 / -3 lines changed
Commit: updating
Changes:
Before
After
|[2.4.27.0](#24270)|15 Jan 2026 (12 months after release of 2.4.129.0)|
|[2.4.129.0](#241290)|27 Mar 2026 (12 months after release of 2.4.131.0)|
|[2.4.131.0](#241310)|30 April 2026|(12 months after release of 2.5.2.0)|
|[2.5.2.0](#2520)||
 
**All other versions are not supported**
 
To read more about autoupgrade, see [Microsoft Entra Connect: Automatic upgrade](how-to-connect-install-automatic-upgrade.md).
 
 
## 2.5.2.0
 
### Release status
 
05/26/2025: Released for download via the Microsoft Entra admin center.
 
### Added Features
- Modern Authentication enabled allowing customers to configure application-based authentication for enhanced securit (Public Preview).
|[2.4.27.0](#24270)|15 Jan 2026 (12 months after release of 2.4.129.0)|
|[2.4.129.0](#241290)|27 Mar 2026 (12 months after release of 2.4.131.0)|
|[2.4.131.0](#241310)|30 April 2026|(12 months after release of 2.5.2.0)|
|[2.5.3.0](#2530)||
 
**All other versions are not supported**
 
To read more about autoupgrade, see [Microsoft Entra Connect: Automatic upgrade](how-to-connect-install-automatic-upgrade.md).
 
 
## 2.5.3.0
 
### Release status
 
05/27/2025: Released for download via the Microsoft Entra admin center.
 
### Added Features
- Modern Authentication enabled allowing customers to configure application-based authentication for enhanced securit (Public Preview).
Modified by Ryan Wike on May 27, 2025 8:47 AM
📖 View on learn.microsoft.com
+2 / -4 lines changed
Commit: adding image meta data
Changes:
Before
After
manager: femila
ms.service: entra-id-governance
ms.workload: identity
ms.topic: how-to
ms.date: 08/27/2024
ms.subservice: lifecycle-workflows
ms.custom: template-how-to
 
#CustomerIntent: As an administrator, I want to be able to edit user account tasks in workflows so that they will run for users synchronized from Active Directory Domain Services.
 
---
 
# Manage users synchronized from Active Directory Domain Services with workflows
manager: femila
ms.service: entra-id-governance
ms.workload: identity
ms.topic: how-to
ms.date: 08/27/2024
ms.subservice: lifecycle-workflows
ms.custom: template-how-to, sfi-image-nochange
#CustomerIntent: As an administrator, I want to be able to edit user account tasks in workflows so that they will run for users synchronized from Active Directory Domain Services.
---
 
# Manage users synchronized from Active Directory Domain Services with workflows
 
 
+1 / -5 lines changed
Commit: adding image meta data
Changes:
Before
After
---
title: Passwordless sign-in with Authenticator
description: Learn how to enable passwordless sign-in to Microsoft Entra ID by using Microsoft Authenticator.
 
 
ms.service: entra-id
ms.subservice: authentication
ms.custom: has-azure-ad-ps-ref
ms.topic: how-to
ms.date: 03/04/2025
 
 
ms.author: justinha
author: justinha
manager: femila
---
title: Passwordless sign-in with Authenticator
description: Learn how to enable passwordless sign-in to Microsoft Entra ID by using Microsoft Authenticator.
ms.service: entra-id
ms.subservice: authentication
ms.custom: has-azure-ad-ps-ref, sfi-image-nochange
ms.topic: how-to
ms.date: 03/04/2025
ms.author: justinha
author: justinha
manager: femila
 
 
 
 
+2 / -3 lines changed
Commit: adding image meta data
Changes:
Before
After
author: SHERMANOUKO
manager: CelesteDG
ms.author: shermanouko
ms.custom: has-adal-ref
ms.date: 05/01/2024
ms.reviewer:
ms.service: identity-platform
 
ms.topic: how-to
#Customer intent: As an application developer / IT admin, I need to know / identify which of my apps are using ADAL.
---
 
author: SHERMANOUKO
manager: CelesteDG
ms.author: shermanouko
ms.date: 05/01/2024
ms.reviewer:
ms.service: identity-platform
ms.topic: how-to
ms.custom: has-adal-ref, sfi-image-nochange
#Customer intent: As an application developer / IT admin, I need to know / identify which of my apps are using ADAL.
---
 
 
+2 / -3 lines changed
Commit: adding image meta data
Changes:
Before
After
author: OwenRichards1
manager: CelesteDG
ms.author: owenrichards
ms.custom:
ms.date: 01/18/2024
ms.reviewer:
ms.service: identity-platform
 
ms.topic: include
---
 
author: OwenRichards1
manager: CelesteDG
ms.author: owenrichards
ms.custom: sfi-image-nochange
ms.date: 01/18/2024
ms.reviewer:
ms.service: identity-platform
ms.topic: include
---
 
 
+2 / -3 lines changed
Commit: adding image meta data
Changes:
Before
After
author: OwenRichards1
manager: CelesteDG
ms.author: owenrichards
ms.custom:
ms.date: 01/02/2024
ms.reviewer:
ms.service: identity-platform
 
ms.topic: include
#Customer intent:
---
 
author: OwenRichards1
manager: CelesteDG
ms.author: owenrichards
ms.date: 01/02/2024
ms.reviewer:
ms.service: identity-platform
ms.topic: include
ms.custom: sfi-image-nochange
#Customer intent:
---
 
 
+2 / -3 lines changed
Commit: adding image meta data
Changes:
Before
After
author: OwenRichards1
manager: CelesteDG
ms.author: owenrichards
ms.custom:
ms.date: 01/18/2024
ms.reviewer:
ms.service: identity-platform
 
ms.topic: include
---
 
author: OwenRichards1
manager: CelesteDG
ms.author: owenrichards
ms.custom: sfi-image-nochange
ms.date: 01/18/2024
ms.reviewer:
ms.service: identity-platform
ms.topic: include
---
 
 
+2 / -3 lines changed
Commit: adding image meta data
Changes:
Before
After
title: Developer guidance for Microsoft Entra Conditional Access
description: Developer guidance and scenarios for Microsoft Entra Conditional Access and Microsoft identity platform.
author: rwike77
keywords:
manager: CelesteDG
ms.author: ryanwi
ms.custom:
ms.date: 05/18/2020
ms.reviewer: jmprieur
ms.service: identity-platform
 
ms.topic: concept-article
#Customer intent: As a developer building apps for Microsoft Entra ID, I want to understand how my app is impacted by Conditional Access challenges, so that I can secure my app and protect the services it accesses.
---
 
title: Developer guidance for Microsoft Entra Conditional Access
description: Developer guidance and scenarios for Microsoft Entra Conditional Access and Microsoft identity platform.
author: rwike77
keywords:
manager: CelesteDG
ms.author: ryanwi
ms.date: 05/18/2020
ms.reviewer: jmprieur
ms.service: identity-platform
ms.topic: concept-article
ms.custom: sfi-image-nochange
#Customer intent: As a developer building apps for Microsoft Entra ID, I want to understand how my app is impacted by Conditional Access challenges, so that I can secure my app and protect the services it accesses.
---
 
 
+1 / -3 lines changed
Commit: adding image meta data
Changes:
Before
After
ms.topic: overview
ms.date: 09/29/2022
ms.author: jricketts
ms.custom:
- it-pro
- kr2b-contr-experiment
---
 
# Solutions
ms.topic: overview
ms.date: 09/29/2022
ms.author: jricketts
ms.custom: - it-pro - kr2b-contr-experiment, sfi-image-nochange
---
 
# Solutions
 
 
Modified by Ryan Wike on May 27, 2025 8:47 AM
📖 View on learn.microsoft.com
+2 / -2 lines changed
Commit: adding image meta data
Changes:
Before
After
ms.date: 01/31/2023
ms.author: jricketts
ms.reviewer: jricketts
ms.custom: "it-pro"
ms.collection:
# Customer intent: As a cloud service customer, I want to understand the data protection considerations for Microsoft Entra, so that I can ensure the security and privacy of my data stored in the service.
---
ms.date: 01/31/2023
ms.author: jricketts
ms.reviewer: jricketts
ms.collection:
ms.custom: "it-pro", sfi-image-nochange
# Customer intent: As a cloud service customer, I want to understand the data protection considerations for Microsoft Entra, so that I can ensure the security and privacy of my data stored in the service.
---
Modified by Ryan Wike on May 27, 2025 8:47 AM
📖 View on learn.microsoft.com
+1 / -3 lines changed
Commit: adding image meta data
Changes:
Before
After
ms.service: entra-external-id
ms.topic: tutorial
ms.date: 03/13/2025
 
ms.author: cmulligan
author: csmulligan
manager: CelesteDG
ms.custom: has-azure-ad-ps-ref, azure-ad-ref-level-one-done
 
ms.collection: M365-identity-device-management
# Customer intent: As an IT admin managing external partners in Microsoft Entra B2B collaboration, I want to use PowerShell to send bulk invitations to guest users, so that I can efficiently add multiple users to my organization and streamline the onboarding process.
---
 
ms.service: entra-external-id
ms.topic: tutorial
ms.date: 03/13/2025
ms.author: cmulligan
author: csmulligan
manager: CelesteDG
ms.collection: M365-identity-device-management
ms.custom: has-azure-ad-ps-ref, azure-ad-ref-level-one-done, sfi-image-nochange
# Customer intent: As an IT admin managing external partners in Microsoft Entra B2B collaboration, I want to use PowerShell to send bulk invitations to guest users, so that I can efficiently add multiple users to my organization and streamline the onboarding process.
---