Microsoft Entra ID

Connect Version History

16 September 2026Feature update+35 / −3 lines

In brief

The documentation adds release notes for an upcoming version with Delos sovereign cloud support, authentication and connector behavior changes, bug fixes, and security improvements. The version and release date remain TBD.

What Entra admins need to know

Review the changes and plan an upgrade when the release becomes available, particularly to obtain the security fixes and account for the updated defaults and certificate validation.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

description: This article lists all releases of Microsoft Entra Connect and Azure AD Sync. ms.assetid: ef2797d7-d440-4a9a-a648-db32ad137494 ms.topic: reference ms.date: ~~07/07/~~08/20/2026 ms.subservice: hybrid-connect ms.custom: no-azure-ad-ps-ref, sfi-ga-nochange ai-usage: ai-assisted |2.5.190.0|02 Feb 2027 (12 months after release of 2.6.1.0)| |2.6.1.0|10 Mar 2027 (12 months after release of 2.6.3.0)| |2.6.3.0|07 Jul 2027 (12 months after release of 2.6.84.0)| |2.6.84.0|TBD (12 months after release of TBD)| |TBD||

All other versions are not supported

To read more about autoupgrade, see Microsoft Entra Connect: Automatic upgrade.

TBD

Release status

TBD: Confirm the release date, Microsoft Entra admin center availability, and auto-upgrade status before publication.

Added features

Added support for the Delos sovereign cloud environment, including Pass-through Authentication, Seamless Single Sign-On, password writeback, and Health Agent monitoring.

Updated features

Passwordless authentication in the Microsoft Entra Connect setup wizard is now generally available and enabled by default. The Windows Web Account Manager prompt supports passkeys, FIDO2 security keys, and passwords, reuses the signed-in session across Microsoft Entra services, and preserves Seamless Single Sign-On Kerberos key rotation. Learn more.
Cloud configuration cmdlets no longer require an explicit -AADUserName. When you omit the parameter, Microsoft Entra Connect derives a sign-in hint from the connector configuration and opens an interactive sign-in prompt. This behavior applies to Set-ADSyncAADCompanyFeature, Set-ADSyncAADPasswordSyncState, Enable-ADSyncExportDeletionThreshold, Set-ADSyncScheduler, and Set-ADSyncDirSyncConfiguration.
The Select Containers dialog in Synchronization Service Manager is now read-only by default. To restore the legacy editable behavior, set the HKLM\SYSTEM\CurrentControlSet\services\ADSync\Parameters\ContainerPickerReadOnly DWORD value to 0.
The Generic LDAP connector wizard now validates the TLS server certificate chain and server name. Connections that use an untrusted certificate or a certificate whose name doesn't match the configured server are rejected.
Updated the bundled SQL Server 2022 LocalDB from version 16.0.4250.1 to 16.0.4262.2.

Bug fixes

Fixed installation and upgrade failures with error 0xE0474352 when you use /useexistingdatabase.
Fixed an issue where upgrading Microsoft Entra Connect didn't update an installed Microsoft Visual C++ 2015-2022 Redistributable version earlier than 14.41.
Fixed an issue where the Microsoft Entra Connect wizard could close during startup when the Windows PowerShell Transcription policy contained an invalid output directory.
Fixed an Application-Based Authentication certificate rotation issue that could remove the last usable application key during directory replica delays.
Fixed an issue where Synchronization Service Manager could close unexpectedly when you opened Connector Properties and listed directory partitions.
Fixed an issue where Change Credentials didn't open for connector rows outside the visible area on configurations with many Active Directory connectors.
Fixed multiple security vulnerabilities in bundled third-party dependencies and hardened local temporary-file permissions and SharePoint connector profile-image downloads.