MODIFIED docs/fundamentals/copilot-entra-risky-user-summarization.md

Modified by Chris Werner on Aug 8, 2025 9:43 AM
📖 View on learn.microsoft.com

+40 / -1 lines changed

Commit: Add prompts to risky users

Changes:

Before

After

- Risk summary: summarize in natural language why the user risk level was elevated.
- Recommendations: get guidance on how to mitigate and respond to these types of attacks, with quick links to help and documentation.
 
This article describes how to access the risky user summary capability of Microsoft Entra ID Protection and Copilot in Microsoft Entra.  Using this feature requires [Microsoft Entra ID P2 licenses](/entra/id-protection/overview-identity-protection#license-requirements).
 
## Investigate risky users
 
- [Incident Response Playbooks](/security/operations/incident-response-playbooks)
- [Risk-based Access Policies](/entra/id-protection/concept-identity-protection-policies)
 
## Next steps
 
- Learn more about [risky users](/entra/id-protection/howto-identity-protection-investigate-risk#risky-users-report).

- Risk summary: summarize in natural language why the user risk level was elevated.
- Recommendations: get guidance on how to mitigate and respond to these types of attacks, with quick links to help and documentation.
 
This article describes how to access the risky user summary capability of Microsoft Entra ID Protection and Copilot in Microsoft Entra. Using this feature requires [Microsoft Entra ID P2 licenses](/entra/id-protection/overview-identity-protection#license-requirements).
 
## Investigate risky users
 
- [Incident Response Playbooks](/security/operations/incident-response-playbooks)
- [Risk-based Access Policies](/entra/id-protection/concept-identity-protection-policies)
 
## Investigate risky users using Copilot
 
Launch Security Copilot from the **Copilot** button in the Microsoft Entra admin center. Use natural language questions or prompts to:
 
- List or identify users based on risk
- Extract user-specific risk information
- Summarize user risk history
 
### List or identify users based on risk
 

MODIFIED docs/fundamentals/copilot-security-entra-responsible-ai-faq.md

Modified by shlipsey3 on Aug 8, 2025 5:35 PM
📖 View on learn.microsoft.com

+12 / -21 lines changed

Commit: metadata-toc

Changes:

Before

After

ms.author: cwerner
manager: pmwongera
ms.date:  10/29/2024
ms.topic: faq
ms.service: entra
ms.localizationpriority:  high
ms.collection:
ms.custom: microsoft-copilot, ignite-2024
ms.reviewer:
---
 
# Responsible AI FAQ: Copilot in Microsoft Entra 
 
This FAQ provides answers to common questions about Responsible AI as it relates to Security Copilot in Microsoft Entra. Learn how this AI-powered security solution enhances the efficiency and capabilities of IT and security professionals to improve security outcomes.
 
## What is Copilot in Microsoft Entra? 
 
Microsoft Security Copilot is a natural language, generative AI-powered security solution that helps increase the efficiency and capabilities of IT and Security professionals to improve security outcomes at machine speed and scale. It draws context from plugins and data to answer prompts so that security professionals and IT admins can help keep their organizations secure.  
 
## What can Copilot in Microsoft Entra do?  

ms.author: cwerner
manager: pmwongera
ms.date:  10/29/2024
ms.update-cycle: 180-days
ms.topic: faq
ms.service: entra
ms.localizationpriority:  high
ms.custom: security-copilot
ms.collection: msec-ai-copilot
---
 
# Responsible AI FAQ: Security Copilot in Microsoft Entra 
 
This FAQ provides answers to common questions about Responsible AI as it relates to Security Copilot in Microsoft Entra. Learn how this AI-powered security solution enhances the efficiency and capabilities of IT and security professionals to improve security outcomes.
 
## What is Security Copilot in Microsoft Entra?
 
Microsoft Security Copilot is a natural language, generative AI-powered security solution that helps increase the efficiency and capabilities of IT and Security professionals to improve security outcomes at machine speed and scale. It draws context from plugins and data to answer prompts so that security professionals and IT admins can help keep their organizations secure.  
 
## What can Security Copilot in Microsoft Entra do?

MODIFIED docs/fundamentals/copilot-security-entra.md

Modified by shlipsey3 on Aug 8, 2025 4:41 PM
📖 View on learn.microsoft.com

+6 / -25 lines changed

Commit: cleanup

Changes:

Before

After

 
This article introduces you to Security Copilot in Microsoft Entra.
 
- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot)
- [Understand authentication in Microsoft Security Copilot](/security-copilot/authentication)
- [Prompting in Microsoft Security Copilot](/security-copilot/prompting-security-copilot)
 
## Security Copilot experiences
 
Security Copilot in Microsoft Entra includes the standalone Security Copilot experience, embedded experiences in the Microsoft Entra admin center, specialized agents that can perform tasks, and natural language prompts that can be used in several end-to-end scenarios.
 
## Get started
 
In the Security Copilot platform, Microsoft Entra is a plugin that provides access to identity data and insights. To use Security Copilot in Microsoft Entra, you need to onboard to Security Copilot and turn on the Microsoft Entra plugin.
 
1. Onboard to Security Copilot by following the [Get started with Microsoft Security Copilot](/security-copilot/get-started-security-copilot) guide.
    - This guide contains guidance around subscription requirements, billing, and capacity.

 
This article introduces you to Security Copilot in Microsoft Entra.
 
## Security Copilot experiences
 
Security Copilot in Microsoft Entra includes the standalone Security Copilot experience, embedded experiences in the Microsoft Entra admin center, specialized agents that can perform tasks, and natural language prompts that can be used in several end-to-end scenarios.
 
## Get started
 
In the Security Copilot platform, Microsoft Entra is a plugin that provides access to your organization's identity data and insights. To use Security Copilot in Microsoft Entra, you need to onboard to Security Copilot and turn on the Microsoft Entra plugin. 
 
1. Onboard to Security Copilot by following the [Get started with Microsoft Security Copilot](/security-copilot/get-started-security-copilot) guide.
    - This guide contains guidance around subscription requirements, billing, and capacity.
    - Take a moment to [understand authentication in Microsoft Security Copilot](/security-copilot/authentication).
1. In the Security Copilot standalone experience, select the **Sources** icon from the prompt bar and turn on the Microsoft Entra plugin for Security Copilot, if it's not already on.
 
Once you're all set up in Security Copilot, you can start using [natural language prompts](/security-copilot/prompting-security-copilot) to help remediate identity-based incidents. You can always check the **Promptbook library** in the standalone [Security Copilot](https://securitycopilot.microsoft.com/) experience for more examples.
 
- *Give me all user details for [email protected] and extract the user Object ID.*
- *Does [email protected] have any registered devices in Microsoft Entra?*

MODIFIED docs/identity-platform/whats-new-docs.md

Modified by Henry Mbugua on Aug 8, 2025 11:33 AM
📖 View on learn.microsoft.com

+6 / -19 lines changed

Commit: Updating what's new

Changes:

Before

After

 
Welcome to what's new in the Microsoft identity platform documentation. This article lists new articles that were added or had significant updates in the last three months.
 
## June 2025
 
### New articles
- [Single-page application: Add sign-in and sign-out code](scenario-spa-sign-in.md) - The update improved content clarity.
- [Microsoft Entra authentication and authorization error codes](reference-error-codes.md) - Partially update error code.
 
## April 2025
 
### New articles
 
* [Add and manage application credentials in Microsoft Entra ID](how-to-add-credentials.md) - Register app refactor
* [How to add a redirect URI to your application](how-to-add-redirect-uri.md) - Register app refactor
 
### Updated articles
 
* [Quickstart: Call a web API that is protected by the Microsoft identity platform](quickstart-web-api-dotnet-protect-app.md) - Update ASP.NET Core web API tutorial (from minimal weather forecast API to controller-based Todo list API)
* [Quickstart: Sign in users in a sample Desktop app](quickstart-desktop-app-sign-in.md) - Register app refactor

 
Welcome to what's new in the Microsoft identity platform documentation. This article lists new articles that were added or had significant updates in the last three months.
 
## July 2025
 
### Updated articles
 
- [What is the Microsoft identity platform?](v2-overview.md) - The update improved content clarity.
 
## June 2025
 
### New articles
- [Single-page application: Add sign-in and sign-out code](scenario-spa-sign-in.md) - The update improved content clarity.
- [Microsoft Entra authentication and authorization error codes](reference-error-codes.md) - Partially update error code.

MODIFIED docs/identity/conditional-access/agent-optimization-logs-metrics.md

Modified by shlipsey3 on Aug 8, 2025 8:00 PM
📖 View on learn.microsoft.com

+9 / -13 lines changed

Commit: copilot-agents-080825

Changes:

Before

After

author: shlipsey3
ms.reviewer: lhuangnorth
manager: pmwongera
ms.date: 07/21/2025
ms.service: entra-id
ms.subservice: conditional-access
ms.topic: how-to
---
# View logs and metrics for the Conditional Access optimization agent
 
   - For more information on roles for the Conditional Access optimization agent, see [Assign Security Copilot access](/copilot/security/authentication#assign-security-copilot-access)
- Review [Privacy and data security in Microsoft Security Copilot](/copilot/security/privacy-data-security)
 
### Limitations
 
- Avoid using an account to set up the agent that requires role activation with Privileged Identity Management (PIM). Using an account that doesn't have standing permissions might cause authentication failures for the agent.
- Once agents are started, they can't be stopped or paused. It might take a few minutes to run.
- For policy consolidation, each agent run only looks at four similar policy pairs.
- The agent currently runs as the user who enables it.
- We recommend running the agent from the Microsoft Entra admin center.

author: shlipsey3
ms.reviewer: lhuangnorth
manager: pmwongera
ms.date: 08/08/2025
ms.update-cycle: 180-days
ms.service: entra-id
ms.subservice: conditional-access
ms.topic: how-to
ms.custom: security-copilot
ms.collection: msec-ai-copilot
---
# View logs and metrics for the Conditional Access optimization agent
 
   - For more information on roles for the Conditional Access optimization agent, see [Assign Security Copilot access](/copilot/security/authentication#assign-security-copilot-access)
- Review [Privacy and data security in Microsoft Security Copilot](/copilot/security/privacy-data-security)
 
## Agent summary
 
The **Agent summary** at the top of the Conditional Access optimization agent page provides a quick summary of what the agent has discovered in the last 30 days. The total number of [security compute units (SCU)](/copilot/security/manage-usage) consumed by the agent is also provided.
 

MODIFIED docs/fundamentals/copilot-entra-lifecycle-workflow.md

Modified by shlipsey3 on Aug 8, 2025 5:35 PM
📖 View on learn.microsoft.com

+4 / -2 lines changed

Commit: metadata-toc

Changes:

Before

After

ms.author: cwerner
manager: pmwongera
ms.date: 02/19/2025
ms.topic: article
ms.service: entra
ms.custom: microsoft-copilot
---
# Manage employee lifecycle using Microsoft Security Copilot
 
 
 

ms.author: cwerner
manager: pmwongera
ms.date: 02/19/2025
ms.update-cycle: 180-days
ms.topic: how-to
ms.service: entra
ms.custom: security-copilot
ms.collection: msec-ai-copilot
---
# Manage employee lifecycle using Microsoft Security Copilot
 

MODIFIED docs/fundamentals/copilot-entra-security-scenarios.md

Modified by Chris Werner on Aug 8, 2025 9:31 AM
📖 View on learn.microsoft.com

+6 / -0 lines changed

Commit: Add prompts to risky users

Changes:

Before

After

 
:::image type="content" source="./media/copilot-entra-risky-user-summarization/risky-user-details.png" alt-text="Screenshot that shows the ID Protection risky user summarization details.":::
 
### Application risk
 
Identity administrators and security analysts can use Microsoft Security Copilot to quickly assess the risk level of applications from workload identities. By leveraging natural language queries, you can easily discover the granted permissions, unused apps in your tenant, and the risk level of applications. This allows admins to take appropriate actions to mitigate risks and ensure the security of your organization's applications.

 
:::image type="content" source="./media/copilot-entra-risky-user-summarization/risky-user-details.png" alt-text="Screenshot that shows the ID Protection risky user summarization details.":::
 
You can also add your own prompts in the Copilot window for the following use cases;
 
- [List or Identify Users Based on Risk](copilot-entra-risky-user-summarization.md#list-or-identify-users-based-on-risk)
- [User-Specific Risk Information](copilot-entra-risky-user-summarization.md#user-specific-risk-information)
- [User Risk History](copilot-entra-risky-user-summarization.md#user-risk-history)
 
### Application risk
 
Identity administrators and security analysts can use Microsoft Security Copilot to quickly assess the risk level of applications from workload identities. By leveraging natural language queries, you can easily discover the granted permissions, unused apps in your tenant, and the risk level of applications. This allows admins to take appropriate actions to mitigate risks and ensure the security of your organization's applications.

MODIFIED docs/identity/conditional-access/agent-optimization.md

Modified by shlipsey3 on Aug 8, 2025 8:00 PM
📖 View on learn.microsoft.com

+3 / -1 lines changed

Commit: copilot-agents-080825

Changes:

Before

After

manager: dougeby
ms.reviewer: lhuangnorth
ms.date: 08/08/2025
 
ms.service: entra-id
ms.subservice: conditional-access
ms.topic: how-to
---
# Microsoft Entra Conditional Access optimization agent with Microsoft Security Copilot
 
 
 

manager: dougeby
ms.reviewer: lhuangnorth
ms.date: 08/08/2025
ms.update-cycle: 180-days
ms.service: entra-id
ms.subservice: conditional-access
ms.topic: how-to
ms.custom: security-copilot
ms.collection: msec-ai-copilot
---
# Microsoft Entra Conditional Access optimization agent with Microsoft Security Copilot
 

MODIFIED docs/identity-platform/quickstart-native-authentication-single-page-app-sdk-sign-in.md

Modified by Derdus Kenga on Aug 8, 2025 10:19 AM
📖 View on learn.microsoft.com

+2 / -2 lines changed

Commit: review comments

Changes:

Before

After

* A user flow. For more information, see [create self-service sign-up user flows for apps in external tenants](../external-id/customers/how-to-user-flow-sign-up-sign-in-customers.md). Under **Identity providers**, select your preferred method of authentication, that's, **Email with password** or **Email one-time passcode**. For this code sample, you can include the following user attributes in your user flow as the app submit these attributes:
  * **Given Name**
  * **Surname**
  * **Job Tittle**
  * **Country**
* Register a new app in the [Microsoft Entra admin center](https://entra.microsoft.com), configured for *Accounts in this organizational directory only*. Refer to [Register an application](quickstart-register-app.md) for more details. Record the following values from the application **Overview** page for later use:
  * Application (client) ID 
  * Directory (tenant) ID

* A user flow. For more information, see [create self-service sign-up user flows for apps in external tenants](../external-id/customers/how-to-user-flow-sign-up-sign-in-customers.md). Under **Identity providers**, select your preferred method of authentication, that's, **Email with password** or **Email one-time passcode**. For this code sample, you can include the following user attributes in your user flow as the app submit these attributes:
  * **Given Name**
  * **Surname**
  * **Job Title**
  * **Country/Region**
* Register a new app in the [Microsoft Entra admin center](https://entra.microsoft.com), configured for *Accounts in this organizational directory only*. Refer to [Register an application](quickstart-register-app.md) for more details. Record the following values from the application **Overview** page for later use:
  * Application (client) ID 
  * Directory (tenant) ID

MODIFIED docs/identity/conditional-access/agent-optimization-review-suggestions.md

Modified by shlipsey3 on Aug 8, 2025 8:00 PM
📖 View on learn.microsoft.com

+3 / -0 lines changed

Commit: copilot-agents-080825

Changes:

Before

After

ms.reviewer: lhuangnorth
manager: pmwongera
ms.date: 07/24/2025
ms.service: entra-id
ms.subservice: conditional-access
ms.topic: how-to
---
 
# How to review and apply suggestions from the Conditional Access optimization agent
 
 
 

ms.reviewer: lhuangnorth
manager: pmwongera
ms.date: 07/24/2025
ms.update-cycle: 180-days
ms.service: entra-id
ms.subservice: conditional-access
ms.topic: how-to
ms.custom: security-copilot
ms.collection: msec-ai-copilot
---
 
# How to review and apply suggestions from the Conditional Access optimization agent

MODIFIED docs/identity/conditional-access/agent-optimization-phased-rollout.md

Modified by shlipsey3 on Aug 8, 2025 8:00 PM
📖 View on learn.microsoft.com

+2 / -0 lines changed

Commit: copilot-agents-080825

Changes:

Before

After

ms.service: entra-id
ms.subservice: conditional-access
ms.topic: concept-article
---
# Conditional Access optimization agent phased rollout (preview)
 
 
 

ms.service: entra-id
ms.subservice: conditional-access
ms.topic: concept-article
ms.custom: security-copilot
ms.collection: msec-ai-copilot
---
# Conditional Access optimization agent phased rollout (preview)
 

MODIFIED docs/identity-platform/tutorial-native-authentication-single-page-app-angular-sign-in.md

Modified by Tracey Torble on Aug 8, 2025 10:33 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: Update docs/identity-platform/tutorial-native-authentication-single-page-app-angular-sign-in.md

Changes:

Before

After

## Next step
 
> [!div class="nextstepaction"]
> [Tutorial: Reset password in Angular single-page app by using native authentication JavaScript SDK](tutorial-native-authentication-single-page-app-angular-reset-password.md).

## Next step
 
> [!div class="nextstepaction"]
> [Tutorial: Reset password in Angular single-page app by using native authentication JavaScript SDK](tutorial-native-authentication-single-page-app-angular-reset-password.md)

MODIFIED docs/identity-platform/tutorial-native-authentication-single-page-app-angular-sign-up.md

Modified by Derdus Kenga on Aug 8, 2025 10:19 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: review comments

Changes:

Before

After

## Next step
 
> [!div class="nextstepaction"]
> [Tutorial: Sign in users into a React single-page app by using native authentication JavaScript SDK](tutorial-native-authentication-single-page-app-angular-sign-in.md).

## Next step
 
> [!div class="nextstepaction"]
> [Tutorial: Sign in users into a React single-page app by using native authentication JavaScript SDK](tutorial-native-authentication-single-page-app-angular-sign-in.md)

📋 Microsoft Entra Documentation Changes

📊 Summary

🆕 New Documentation Files

📝 Modified Documentation Files

🗑️ Deleted Documentation Files