📋 Microsoft Entra Documentation Changes

Daily summary for changes since August 25th 2025, 8:08 PM PDT

Report generated on August 26th 2025, 8:08 PM PDT

📊 Summary

15
Total Commits
0
New Files
4
Modified Files
0
Deleted Files
9
Contributors

📝 Modified Documentation Files

MODIFIED docs/identity/authentication/concept-mandatory-multifactor-authentication.md
Modified by Justinha on Aug 26, 2025 9:09 PM
📖 View on learn.microsoft.com
+9 / -9 lines changed
Commit: changed September 15 to October 1
Changes:
Before
After
ms.service: entra-id
ms.subservice: authentication
ms.topic: article
ms.date: 08/05/2025
ms.author: justinha
author: justinha
manager: dougeby
### Enforcement phases
 
> [!NOTE]
> The date of enforcement for Phase 2 has changed to September 15, 2025.
 
The enforcement of MFA for applications rolls out in two phases.
 
 
#### Phase 2 applications
 
Starting September 15, 2025, MFA enforcement will gradually begin for accounts that sign in to Azure CLI, Azure PowerShell, Azure mobile app, IaC tools, and REST API endpoints to perform any Create, Update, or Delete operation. Read operations won't require MFA.
 
Some customers may use a user account in Microsoft Entra ID as a service account. It's recommended to migrate these user-based service accounts to [secure cloud-based service accounts](/entra/architecture/secure-service-accounts) with [workload identities](~/workload-id/workload-identities-overview.md).
ms.service: entra-id
ms.subservice: authentication
ms.topic: article
ms.date: 08/26/2025
ms.author: justinha
author: justinha
manager: dougeby
### Enforcement phases
 
> [!NOTE]
> The date of enforcement for Phase 2 has changed to October 1, 2025.
 
The enforcement of MFA for applications rolls out in two phases.
 
 
#### Phase 2 applications
 
Starting October 1, 2025, MFA enforcement will gradually begin for accounts that sign in to Azure CLI, Azure PowerShell, Azure mobile app, IaC tools, and REST API endpoints to perform any Create, Update, or Delete operation. Read operations won't require MFA.
 
Some customers may use a user account in Microsoft Entra ID as a service account. It's recommended to migrate these user-based service accounts to [secure cloud-based service accounts](/entra/architecture/secure-service-accounts) with [workload identities](~/workload-id/workload-identities-overview.md).
MODIFIED docs/id-governance/delegate-approvals-my-access.md
Modified by Ortagus Winfrey on Aug 26, 2025 7:13 PM
📖 View on learn.microsoft.com
+5 / -5 lines changed
Commit: Updates
Changes:
Before
After
Approval delegation in My Access allows approvers to assign another individual to respond to access package approval requests on their behalf. This feature helps maintain productivity when approvers are unavailable due to leave, travel, or other commitments.
 
> [!NOTE]
> This feature applies only to approvals. Access review delegation isn't supported.
 
## License requirements
 
 
- All approvals assigned after the delegation are routed to the delegate.
- The original approver can still respond to approvals during the delegation period.
- Delegation can be time-bound or indefinite.
- Delegates are notified when they're assigned.
- Requestors are notified when their request is approved by a delegate.
- Delegation is always bulk; approvers can't delegate specific types of approvals.
 
1. Browse to **ID Governance** > **Entitlement Management** > **Preview Features**.
 
1. Select **“Enable approvers to delegate in MyAccess”**.
 
### Set up a delegate
Approval delegation in My Access allows approvers to assign another individual to respond to access package approval requests on their behalf. This feature helps maintain productivity when approvers are unavailable due to leave, travel, or other commitments.
 
> [!NOTE]
> This feature currently applies only to access package approvals and will be expanded to support access reviews in November 2025.
 
## License requirements
 
 
- All approvals assigned after the delegation are routed to the delegate.
- The original approver can still respond to approvals during the delegation period.
- Delegations, prior to November 1 2025, are time-bound. After November 1, 2025, they can be time-bound or indefinite.
- Delegates are notified when they're assigned.
- Requestors are notified when their request is approved by a delegate.
- Delegation is always bulk; approvers can't delegate specific types of approvals.
 
1. Browse to **ID Governance** > **Entitlement Management** > **Preview Features**.
 
1. Select **“Allow users to delegate approvals and access reviews in My Access”**.
 
### Set up a delegate
MODIFIED docs/identity-platform/tutorial-native-authentication-single-page-app-react-sdk-reset-password.md
Modified by Derdus Kenga on Aug 26, 2025 12:14 PM
📖 View on learn.microsoft.com
+1 / -4 lines changed
Commit: Fix broken links
Changes:
Before
After
ms.service: entra-external-id
ms.subservice: external
ms.topic: tutorial
ms.date: 06/30/2025
#Customer intent: As a developer, I want to build a React single-page application that uses native authentication JavaScript SDK so that I can sign in users with a username (email) and password or email with one-time passcode.
---
 
 
1. Create *reset-password/components/NewPasswordForm.tsx* file, then paste the code from [reset-password/components/NewPasswordForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/reset-password/components/NewPasswordForm.tsx). This component displays a form that collects a user's new password.
 
1. Create *reset-password/components/ResetPasswordResult.tsx* file, then paste the code from [reset-password/components/ResetPasswordResult.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/reset-password/components/ResetPasswordResult.tsx). This component displays password reset status.
 
 
### Handle form interactions
 
Create *reset-password/page.tsx* file to handle logic for a sign-in flow. In this file:
ms.service: entra-external-id
ms.subservice: external
ms.topic: tutorial
ms.date: 08/30/2025
#Customer intent: As a developer, I want to build a React single-page application that uses native authentication JavaScript SDK so that I can sign in users with a username (email) and password or email with one-time passcode.
---
 
 
1. Create *reset-password/components/NewPasswordForm.tsx* file, then paste the code from [reset-password/components/NewPasswordForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/reset-password/components/NewPasswordForm.tsx). This component displays a form that collects a user's new password.
 
### Handle form interactions
 
Create *reset-password/page.tsx* file to handle logic for a sign-in flow. In this file:
 
 
 
MODIFIED docs/identity-platform/tutorial-native-authentication-single-page-app-react-sdk-sign-up.md
Modified by Derdus Kenga on Aug 26, 2025 12:14 PM
📖 View on learn.microsoft.com
+1 / -3 lines changed
Commit: Fix broken links
Changes:
Before
After
ms.service: entra-external-id
ms.subservice: external
ms.topic: tutorial
ms.date: 06/30/2025
#Customer intent: As a developer, I want to build a React single-page application that uses native authentication's JavaScript SDK so that I can sign up users with email with password or email one-timepasscode authentication menthods
---
 
 
1. Create a *sign-up/components/CodeForm.tsx* file, then paste the code from [sign-up/components/CodeForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/sign-up/components/CodeForm.tsx). This component displays a form that collects a one-time passcode sent to the user. You require this form for either email with password or email with one-time passcode authentication method.
 
1. Create a *sign-up/components/SignUpResult.tsx* file, then paste the code from [sign-up/components/SignUpResult.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/sign-up/components/SignUpResult.tsx). This component displays sing-up result.
 
1. If your choice of authentication method is *email with password*, create a *sign-up/components/PasswordForm.tsx* file, then paste the code from [sign-up/components/PasswordForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/sign-up/components/PasswordForm.tsx). This component displays a password input form.
 
## Handle form interaction
ms.service: entra-external-id
ms.subservice: external
ms.topic: tutorial
ms.date: 08/30/2025
#Customer intent: As a developer, I want to build a React single-page application that uses native authentication's JavaScript SDK so that I can sign up users with email with password or email one-timepasscode authentication menthods
---
 
 
1. Create a *sign-up/components/CodeForm.tsx* file, then paste the code from [sign-up/components/CodeForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/sign-up/components/CodeForm.tsx). This component displays a form that collects a one-time passcode sent to the user. You require this form for either email with password or email with one-time passcode authentication method.
 
1. If your choice of authentication method is *email with password*, create a *sign-up/components/PasswordForm.tsx* file, then paste the code from [sign-up/components/PasswordForm.tsx](https://github.com/Azure-Samples/ms-identity-ciam-native-javascript-samples/blob/main/typescript/native-auth/react-nextjs-sample/src/app/sign-up/components/PasswordForm.tsx). This component displays a password input form.
 
## Handle form interaction
 
 

🤖 This report was automatically generated by the Entra Docs Monitor

📧 Delivered to [email protected]

🔗 Visit Repository