📋 Microsoft Entra Documentation Changes

manager: dougeby

ms.reviewer: lhuangnorth

 

 

ms.update-cycle: 180-days

ms.service: entra-id

 

Organizations that use the [ServiceNow plugin for Security Copilot](/copilot/security/plugin-servicenow) can now have the Conditional Access optimization agent create ServiceNow incidents for each new suggestion the agent generates. This allows IT and security teams to track, review, and approve or reject agent suggestions within existing ServiceNow workflows. At this time, only change requests (CHG) are supported.

 

 

 

 

 

### Custom instructions

ms.author: henrymbugua

ms.service: identity-platform

ms.topic: tutorial

ms.custom:

 

#Customer intent: As a developer, I want to authenticate users from a sample Android mobile app so that I can experience how Microsoft Entra External ID

Use these steps to create configuration file:

 

 

1. In Android Studio's project pane, navigate to **app\src\main\res**.

1. Right-click **res** and choose **New** > **Directory**. Enter `raw` as the new directory name and select **OK**.

You can find these values in the Authentication blade of your app registration as well.

 

 

 

 

1. Download the Azure Arc agent setup script from the Azure portal.

1. Search for **Windows PowerShell ISE** in the search box on the Task bar. Right click on the application, then click **Run as administrator**.

From PowerShell, open the downloaded file labeled `OnboardingScript.ps1`.

1. Log in on the pop-up window to authenticate using the Azure account credentials. The screen returns a message that reads:

`Authentication complete. You can return to the application. Feel free to close this browser tab.`

 

### Set up Log Analytics workspace

1. Go to the [Azure portal](https://portal.azure.com/).

1. In the search bar, type **Log Analytics** and select **Log Analytics workspaces**.

1. Click **Create**.

1. Fill in the necessary details:

- **Name**: Provide a unique name for the Log Analytics workspace.

- **Region**: Choose the region closest to your on-premises machine.

1. Click **Review + create**, then **Create**.

1. Select the workspace name you created.

ms.author: kenwith

manager: dougeby

ms.topic: concept-article

ms.service: global-secure-access

ms.reviewer: cagautham

ai-usage: ai-assisted

 

Global Secure Access, built into Microsoft Entra, addresses these challenges by leveraging existing B2B guest identities. This integration provides enhanced security features, including full Conditional Access, Continuous Access Evaluation, and cross-tenant trust, helping organizations manage and secure external user access more effectively.

 

## Enable B2B guest access for Azure Virtual Desktop and Windows 365

 

You can enable Global Secure Access on Windows 365 and Azure Virtual Desktop instances that support external identities to provide B2B guest access. With this capability, external users—such as guests, partners, and contractors—from other organizations can securely access resources in your tenant (the resource tenant). As a resource tenant administrator, you can configure Private Access, Internet Access, and Microsoft 365 traffic policies for these third-party users, helping ensure secure and controlled access to your organization's resources.

 

 

To enable B2B guest access for Windows 365 or Azure Virtual Desktop (AVD) virtual machines using Global Secure Access, follow these steps:

 

 

Access more queries and visual insights based on AADUserRiskEvents and AADRisky Users logs in the [Impact analysis of risk-based access policies workbook](workbook-risk-based-policy-impact.md).

 

 

> [!VIDEO abb7d7fe-4155-4ee1-bcce-afa027d22f8d]

 

---

description: Use the web category checker to find which web content category a URL belongs to via Microsoft Graph.

author: fgomulka

ms.author: frankgomulka

ai-usage: ai-assisted

---

 

 

The article shows how to use the web category checker tool to determine which content category a given Uniform Resource Locator (URL) belongs to. The tool is currently available only via Microsoft Graph API.

 

 

## Deployment overview

 

 

> [!TIP]

> Azure Lighthouse is typically used to manage resources for multiple customers. However, it can also be used to simplify cross-tenant administration [within an enterprise that has multiple Microsoft Entra tenants of its own](/azure/lighthouse/concepts/enterprise). In our case, we're using it to delegate management of a single resource group.

- [Microsoft Entra ID Protection risk detections](/entra/id-protection/concept-identity-protection-risks) get a consistent view of original user Source IP address for assessing various risk scores.

- Original user Source IP is also made available in [Microsoft Entra sign-in logs](/azure/active-directory/reports-monitoring/concept-all-sign-ins) and in [Microsoft Entra audit logs](/entra/identity/monitoring-health/concept-audit-logs)

 

## Prerequisites

 

* Administrators who interact with **Global Secure Access** features must have both of the following role assignments depending on the tasks they're performing.

 

- [Microsoft Entra Domain Services](/entra/identity/domain-services/overview)

- [Security Assertion Markup Language (SAML) token claims](~/identity-platform/saml-claims-customization.md)

 

## Features of custom security attributes