Microsoft Entra ID
AuthenticationConnect Version History
In brief
The version history entry now states that the Generic LDAP connector validates the TLS server certificate chain and server name, removing the detailed rejection conditions.
What Entra admins need to know
No administrator action is required; the entry provides less detail about which certificate conditions cause connections to be rejected.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- Passwordless authentication in the Microsoft Entra Connect setup wizard is now generally available and enabled by default. The Windows Web Account Manager prompt supports passkeys, FIDO2 security keys, and passwords, reuses the signed-in session across Microsoft Entra services, and preserves Seamless Single Sign-On Kerberos key rotation. Learn more.
- Cloud configuration cmdlets no longer require an explicit
-AADUserName. When you omit the parameter, Microsoft Entra Connect derives a sign-in hint from the connector configuration and opens an interactive sign-in prompt. This behavior applies toSet-ADSyncAADCompanyFeature,Set-ADSyncAADPasswordSyncState,Enable-ADSyncExportDeletionThreshold,Set-ADSyncScheduler, andSet-ADSyncDirSyncConfiguration. - The Select Containers dialog in Synchronization Service Manager is now read-only.
- The Generic LDAP connector wizard now validates the TLS server certificate chain and server name.
Connections that use an untrusted certificate or a certificate whose name doesn't match the configured server are rejected. - Updated the bundled SQL Server 2022 LocalDB from version 16.0.4250.1 to 16.0.4262.2.
Bug fixes
@@ -146,7 +146,7 @@ TBD: Confirm the release date, Microsoft Entra admin center availability, and au - Passwordless authentication in the Microsoft Entra Connect setup wizard is now generally available and enabled by default. The Windows Web Account Manager prompt supports passkeys, FIDO2 security keys, and passwords, reuses the signed-in session across Microsoft Entra services, and preserves Seamless Single Sign-On Kerberos key rotation. [Learn more](how-to-connect-passwordless-authentication.md). - Cloud configuration cmdlets no longer require an explicit `-AADUserName`. When you omit the parameter, Microsoft Entra Connect derives a sign-in hint from the connector configuration and opens an interactive sign-in prompt. This behavior applies to `Set-ADSyncAADCompanyFeature`, `Set-ADSyncAADPasswordSyncState`, `Enable-ADSyncExportDeletionThreshold`, `Set-ADSyncScheduler`, and `Set-ADSyncDirSyncConfiguration`. - The **Select Containers** dialog in Synchronization Service Manager is now read-only.-- The Generic LDAP connector wizard now validates the TLS server certificate chain and server name. Connections that use an untrusted certificate or a certificate whose name doesn't match the configured server are rejected.+- The Generic LDAP connector wizard now validates the TLS server certificate chain and server name. - Updated the bundled SQL Server 2022 LocalDB from version 16.0.4250.1 to 16.0.4262.2. ### Bug fixes