MODIFIED docs/identity/hybrid/how-to-group-source-of-authority-configure.md

Modified by Justinha on Oct 13, 2025 3:31 PM
📖 View on learn.microsoft.com

+11 / -2 lines changed

Commit: Update group SOA configuration steps and date

Changes:

Before

After

ms.service: entra-id
ms.subservice: hybrid
ms.topic: how-to
ms.date: 10/02/2025
ms.author: justinha
ms.reviewer: dhanyak
---
 
## Prepare groups for Group SOA conversion and provisioning
 
If you want to provision the group back to AD, ensure you can preserve the OU Path and set it in the **Group Provision to AD** configuration with the right mapping.
 
## Convert SOA for a test group

ms.service: entra-id
ms.subservice: hybrid
ms.topic: how-to
ms.date: 10/13/2025
ms.author: justinha
ms.reviewer: dhanyak
---
 
## Prepare groups for Group SOA conversion and provisioning
 
If you want to provision the group back to AD DS, plan to complete the following steps to preserve the OU Path and set it in the **Group Provision to AD** configuration with the right mapping:
 
1. Change the group scope for the AD DS groups to Universal.
1. Create a tenant-scoped directory extension property for groups. 
1. Map an on-premises value, such as the distinguished name (DN), directly into the extension property. 
1. Verify the property value using Microsoft Graph. 
1. Convert the Source of Authority (SOA) when ready. 
1. Use custom expressions to ensure Cloud Sync provisions groups back to AD DS with the same CN and OU values. 
 
For more information, see [Provision groups to Active Directory Domain Services by using Microsoft Entra Cloud Sync](cloud-sync/tutorial-group-provisioning.md).

MODIFIED docs/identity/authentication/how-to-plan-password-scramble-phishing-resistant-passwordless-authentication.md

Modified by Dennis Rea on Oct 13, 2025 4:20 PM
📖 View on learn.microsoft.com

+2 / -2 lines changed

Commit: Acrolinx fix and metadata title casing

Changes:

Before

After

---
title: Remove passwords from Microsoft Entra ID
description: Password scrambling guidance to deploy passwordless and phishing-resistant authentication for organizations that use Microsoft Entra ID.
 
ms.service: entra-id 
 
# Plan to remove passwords from Microsoft Entra ID
 
Passwords are one of the least secure authentication methods available. They are vulnerable to a wide range of threats—including phishing, credential stuffing, brute-force attacks, and social engineering. To realise the benefits of passwordless authentication in Microsoft Entra ID, you must ensure passwords are no longer available as a sign-in option in your tenant.
 
Password scrambling ensures that users can't authenticate using passwords. It forces them to use more secure passwordless credentials like Windows Hello for Business, FIDO2 security keys, or Microsoft Authenticator. This article provides guidance about how to scramble passwords for both hybrid users who are synced from on-premises Active Directory Domain Services (AD DS) and cloud-only users in Microsoft Entra ID.

---
title: Remove Passwords from Microsoft Entra ID
description: Password scrambling guidance to deploy passwordless and phishing-resistant authentication for organizations that use Microsoft Entra ID.
 
ms.service: entra-id 
 
# Plan to remove passwords from Microsoft Entra ID
 
Passwords are one of the least secure authentication methods available. They are vulnerable to a wide range of threats—including phishing, credential stuffing, brute-force attacks, and social engineering. To realize the benefits of passwordless authentication in Microsoft Entra ID, you must ensure passwords are no longer available as a sign-in option in your tenant.
 
Password scrambling ensures that users can't authenticate using passwords. It forces them to use more secure passwordless credentials like Windows Hello for Business, FIDO2 security keys, or Microsoft Authenticator. This article provides guidance about how to scramble passwords for both hybrid users who are synced from on-premises Active Directory Domain Services (AD DS) and cloud-only users in Microsoft Entra ID.

MODIFIED docs/identity/enterprise-apps/view-applications-portal.md

Modified by Mark Wahl on Oct 13, 2025 5:50 PM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: fix typo

Changes:

Before

After

    - **Enterprise Applications** shows non-Microsoft applications.
    - **Microsoft Applications** shows Microsoft applications.
    - **Managed Identities** shows applications that are used to authenticate to services that support Microsoft Entra authentication.
    - **Agent ID (Preview)** shows AI agent identities that are used by AI agents to to authenticate to services that support Microsoft Entra authentication.
    - **All Applications** shows both non-Microsoft and Microsoft applications.
1. Under **Application ID starts with**, enter the first few digits of the application ID if you know the application ID.
1. After choosing the options you want, select **Apply**.

    - **Enterprise Applications** shows non-Microsoft applications.
    - **Microsoft Applications** shows Microsoft applications.
    - **Managed Identities** shows applications that are used to authenticate to services that support Microsoft Entra authentication.
    - **Agent ID (Preview)** shows AI agent identities that are used by AI agents to authenticate to services that support Microsoft Entra authentication.
    - **All Applications** shows both non-Microsoft and Microsoft applications.
1. Under **Application ID starts with**, enter the first few digits of the application ID if you know the application ID.
1. After choosing the options you want, select **Apply**.

MODIFIED docs/identity/users/domains-admin-takeover.md

Modified by Eunice Waweru on Oct 13, 2025 2:40 PM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: Update ms.custom metadata in domains-admin-takeover.md

Changes:

Before

After

ms.date: 01/06/2025
ms.author: barclayn
ms.reviewer: sumitp
ms.custom: it-pro, has-azure-ad-ps-ref, sfi-ga-nochange
---
# Take over an unmanaged directory as administrator in Microsoft Entra ID
 

ms.date: 01/06/2025
ms.author: barclayn
ms.reviewer: sumitp
ms.custom: it-pro, no-azure-ad-ps-ref, sfi-ga-nochange
---
# Take over an unmanaged directory as administrator in Microsoft Entra ID
 

MODIFIED docs/identity-platform/how-to-native-authentication-cors-solution-production-environment.md

Modified by Chris Werner on Oct 13, 2025 10:31 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: outliers

Changes:

Before

After

In a production environment, we recommended using [Azure Front Door with a Standard/Premium subscription](/azure/frontdoor/standard-premium/troubleshoot-cross-origin-resources) as a reverse proxy.
 
## Prerequisites
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:
    - You can use the React app described in [Quickstart: Sign in users into a sample React SPA by using native authentication API](quickstart-native-authentication-single-page-app-react-sign-in.md). However, don't configure or run the proxy server, as this guide covers that set up.
    - After you run the app, record the app URL for later use in this guide. In production, this URL contains the domain that you want to use as a custom domain URL, such as `http://www.contoso.com`

In a production environment, we recommended using [Azure Front Door with a Standard/Premium subscription](/azure/frontdoor/standard-premium/troubleshoot-cross-origin-resources) as a reverse proxy.
 
## Prerequisites
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:
    - You can use the React app described in [Quickstart: Sign in users into a sample React SPA by using native authentication API](quickstart-native-authentication-single-page-app-react-sign-in.md). However, don't configure or run the proxy server, as this guide covers that set up.
    - After you run the app, record the app URL for later use in this guide. In production, this URL contains the domain that you want to use as a custom domain URL, such as `http://www.contoso.com`

MODIFIED docs/identity-platform/how-to-native-authentication-cors-solution-test-environment.md

Modified by Chris Werner on Oct 13, 2025 10:31 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: outliers

Changes:

Before

After

 
## Prerequisites
 
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
- Register `Microsoft.App` resource provider, see [How to register resource provider](/azure/azure-resource-manager/management/resource-providers-and-types). You only need to complete this step once for each newly created subscription.
- Install [Azure Developer CLI (azd)](/azure/developer/azure-developer-cli/install-azd?tabs=winget-windows%2Cbrew-mac%2Cscript-linux&pivots=os-windows).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:

 
## Prerequisites
 
- An Azure subscription. [Create an account for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
- Register `Microsoft.App` resource provider, see [How to register resource provider](/azure/azure-resource-manager/management/resource-providers-and-types). You only need to complete this step once for each newly created subscription.
- Install [Azure Developer CLI (azd)](/azure/developer/azure-developer-cli/install-azd?tabs=winget-windows%2Cbrew-mac%2Cscript-linux&pivots=os-windows).
- A sample SPA that you can access via a URL such as `http://www.contoso.com`:

MODIFIED docs/identity/enterprise-apps/f5-big-ip-kerberos-advanced.md

Modified by Chris Werner on Oct 13, 2025 10:31 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: outliers

Changes:

Before

After

Prior BIG-IP experience isn't necessary. You need:

* An [Azure free account](https://azure.microsoft.com/free/active-directory/), or a higher-tier subscription.
* A BIG-IP, or [deploy BIG-IP Virtual Edition in Azure](~/identity/enterprise-apps/f5-bigip-deployment-guide.md).
* Any of the following F5 BIG-IP licenses:
  * F5 BIG-IP Best bundle

Prior BIG-IP experience isn't necessary. You need:

* An [Azure free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn/), or a higher-tier subscription.
* A BIG-IP, or [deploy BIG-IP Virtual Edition in Azure](~/identity/enterprise-apps/f5-bigip-deployment-guide.md).
* Any of the following F5 BIG-IP licenses:
  * F5 BIG-IP Best bundle

MODIFIED docs/identity/enterprise-apps/f5-big-ip-ldap-header-easybutton.md

Modified by Chris Werner on Oct 13, 2025 10:31 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: outliers

Changes:

Before

After

Prior BIG-IP experience isn't necessary, but you need:

- An [Azure free account](https://azure.microsoft.com/free/active-directory/), or a higher-tier subscription
- A BIG-IP or [deploy a BIG-IP Virtual Edition (VE) in Azure](./f5-bigip-deployment-guide.md)
- Any of the following F5 BIG-IP licenses:
  - F5 BIG-IP® Best bundle

Prior BIG-IP experience isn't necessary, but you need:

- An [Azure free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn/), or a higher-tier subscription
- A BIG-IP or [deploy a BIG-IP Virtual Edition (VE) in Azure](./f5-bigip-deployment-guide.md)
- Any of the following F5 BIG-IP licenses:
  - F5 BIG-IP® Best bundle

MODIFIED docs/identity/enterprise-apps/f5-big-ip-oracle-jde-easy-button.md

Modified by Chris Werner on Oct 13, 2025 10:31 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: outliers

Changes:

Before

After

## Prerequisites
 
* A Microsoft Entra ID Free account, or higher
  * If you don't have one, get an [Azure free account](https://azure.microsoft.com/free/active-directory/)
* A BIG-IP or a BIG-IP Virtual Edition (VE) in Azure
  * See, [Deploy F5 BIG-IP Virtual Edition VM in Azure](./f5-bigip-deployment-guide.md)
* Any of the following F5 BIG-IP licenses:

## Prerequisites
 
* A Microsoft Entra ID Free account, or higher
  * If you don't have one, get an [Azure free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn/)
* A BIG-IP or a BIG-IP Virtual Edition (VE) in Azure
  * See, [Deploy F5 BIG-IP Virtual Edition VM in Azure](./f5-bigip-deployment-guide.md)
* Any of the following F5 BIG-IP licenses:

MODIFIED docs/identity/enterprise-apps/f5-big-ip-oracle-peoplesoft-easy-button.md

Modified by Chris Werner on Oct 13, 2025 10:31 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: outliers

Changes:

Before

After

## Prerequisites
 
* A Microsoft Entra ID Free account, or higher
  * If you don't have one, get an [Azure free account](https://azure.microsoft.com/free/active-directory/)
* A BIG-IP or a BIG-IP Virtual Edition (VE) in Azure
  * See, [Deploy F5 BIG-IP Virtual Edition VM in Azure](./f5-bigip-deployment-guide.md)
* Any of the following F5 BIG-IP licenses:

## Prerequisites
 
* A Microsoft Entra ID Free account, or higher
  * If you don't have one, get an [Azure free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn/)
* A BIG-IP or a BIG-IP Virtual Edition (VE) in Azure
  * See, [Deploy F5 BIG-IP Virtual Edition VM in Azure](./f5-bigip-deployment-guide.md)
* Any of the following F5 BIG-IP licenses:

MODIFIED docs/includes/azure-docs-pr/quickstarts-free-trial-note.md

Modified by Chris Werner on Oct 13, 2025 10:31 AM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: outliers

Changes:

Before

After

ms.date: 01/18/2022
ms.author: cfowler
---
If you don't have an [Azure subscription](/azure/guides/developer/azure-developer-guide#understanding-accounts-subscriptions-and-billing), create an [Azure free account](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio) before you begin.

ms.date: 01/18/2022
ms.author: cfowler
---
If you don't have an [Azure subscription](/azure/guides/developer/azure-developer-guide#understanding-accounts-subscriptions-and-billing), create an [Azure free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn) before you begin.

📋 Microsoft Entra Documentation Changes

📊 Summary

📝 Modified Documentation Files