Daily.Entra.NewsDaily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
The most consequential update is the AD FS/PingFederate hardening guidance: it moves the required Microsoft Entra Connect version from 2.5.79.0 to 2.6.84.0 or later and requires application-based authentication to maintain directory synchronization and avoid service disruptions. Separately, the broader Connect Sync hardening deadline moves from September 30, 2026, to April 7, 2027, while version 2.5.79.0 or later remains required. The remaining updates mainly refine bulk-user procedures and Agent ID role guidance.
Workload ID · ProvisioningThe required Microsoft Entra Connect version changed from 2.5.79.0 to 2.6.84.0 or later. The guidance also requires application-based authentication to maintain directory synchronization and avoid service disruptions.
Entra ID · ProvisioningThe minimum-version deadline moved from September 30, 2026, to April 7, 2027. Microsoft Entra Connect Sync version 2.5.79.0 or later remains required, and synchronization services will fail until the upgrade is completed.
Entra ID · GeneralThe procedure now requires administrators to preserve downloaded column headings, permits the examples row to remain, and identifies only Name, User name, and Initial password as required fields.
Entra ID · GeneralThe instructions require the exact downloaded column header, allow each user row to contain either a user principal name or object ID, permit the examples row to remain, and list User Administrator as the minimum role.
Agent ID · DeveloperThe authorization guidance now describes highly privileged directory roles that are blocked for agent identities and removes the obsolete custom-role restriction wording.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now requires preserving downloaded column headings, allows the examples row to remain, and identifies only Name, User name, and Initial password as required fields. The sample CSV was simplified.
The instructions now require the exact downloaded column header and allow each user row to contain either a user principal name or object ID. The examples row may remain, and User Administrator is listed as the minimum role.
The article now requires the downloaded `Object ID [objectId] Required` header to remain unchanged and says the examples row can be retained. It also documents the User Administrator prerequisite.
The minimum-version deadline for Microsoft Entra Connect Sync is extended from September 30, 2026, to April 7, 2027. Version 2.5.79.0 or later is required.
The guide now consistently refers to the application, tenant, SCIM API, and gallery entry as Zscaler ZNet.
The tutorial replaces references to Zidentity and Zscaler Provisioning with Zscaler Authentication Service and updates related titles, prerequisites, app-role guidance, and provisioning steps. The page date was also updated.
The documentation now describes blocked highly privileged directory roles for agent identities without the obsolete custom-role restriction wording.
The required Microsoft Entra Connect version changed from 2.5.79.0 to 2.6.84.0 or later. The documentation also now requires application-based authentication to maintain directory synchronization and avoid service disruptions.
