Daily.Entra.NewsDaily AI-generated highlights from Microsoft Learn and Message Center. Browse the archive from 15 April 2025 → About this project →
SharePoint One-Time Passcode authentication will retire across Microsoft 365 tenants starting in mid-October 2026, moving external sharing to Microsoft Entra B2B. Microsoft also opened self-service App Gallery onboarding in public preview ahead of general availability in mid-November, while Connect guidance separates a new AD FS/PingFederate hardening requirement from the broader Sync upgrade deadline.
External ID · Conditional AccessSharePoint One-Time Passcode authentication will retire starting in mid-October 2026 for all Microsoft 365 tenants. External users will need guest accounts under Microsoft Entra B2B, bringing SharePoint and OneDrive sharing under consistent governance and Conditional Access.
Entra ID · StandardsISVs can now validate SSO and provisioning integrations, manage submissions, and track status in the Microsoft Entra admin center. The capability is in public preview, with general availability beginning in mid-November 2026.
Workload ID · ProvisioningThe documented requirement changes from Microsoft Entra Connect 2.5.79.0 to 2.6.84.0 or later. Application-based authentication is also required to maintain directory synchronization and avoid service disruptions.
Entra ID · ProvisioningThe minimum-version deadline shifts from September 30, 2026, to April 7, 2027. Microsoft Entra Connect Sync 2.5.79.0 or later is required; synchronization services will fail until the upgrade is completed if the requirement is missed.
Workload ID · AuthenticationThe updated guide removes its Preview label and states that workload identities are reusable only when their Application API host matches the provisioning app’s SAP SuccessFactors API host. It also adds the Application ID URI format and compatibility details for the September 15, 2026 update.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now requires preserving downloaded column headings, allows the examples row to remain, and identifies only Name, User name, and Initial password as required fields. The sample CSV was simplified.
The instructions now require the exact downloaded column header and allow each user row to contain either a user principal name or object ID. The examples row may remain, and User Administrator is listed as the minimum role.
The article now requires the downloaded `Object ID [objectId] Required` header to remain unchanged and says the examples row can be retained. It also documents the User Administrator prerequisite.
The article now uses a Cisco FQDN placeholder for the SAML metadata URL and emphasizes that Identifier and Reply URL examples must be verified against the intended Cisco endpoints and trusted domains.
The page’s publication date and custom metadata tags were updated.
The minimum-version deadline for Microsoft Entra Connect Sync is extended from September 30, 2026, to April 7, 2027. Version 2.5.79.0 or later is required.
The guide now consistently refers to the application, tenant, SCIM API, and gallery entry as Zscaler ZNet.
The tutorial replaces references to Zidentity and Zscaler Provisioning with Zscaler Authentication Service and updates related titles, prerequisites, app-role guidance, and provisioning steps. The page date was also updated.
Microsoft Entra App Gallery introduces self-service onboarding for new applications, allowing ISVs to validate SSO and provisioning integrations, manage submissions, and track status via the Microsoft Entra admin center. Public preview is available now; general availability begins mid-November 2026. No action required.
The documentation now describes blocked highly privileged directory roles for agent identities without the obsolete custom-role restriction wording.
The new page documents the preview experience for reviewing guests, extending or ending sponsorship, and sponsoring eligible unsponsored guests. It also explains policy-driven lifecycle behavior.
The documentation describes configuring guest scopes, lifecycle rules, notifications, precedence, and automated disable or deletion actions for external users.
SharePoint One-Time Passcode (SPO OTP) authentication will retire starting mid-October 2026, transitioning external sharing and authentication to Microsoft Entra B2B. This change affects all Microsoft 365 tenants, requiring guest accounts for external users and enabling consistent governance and Conditional Access across SharePoint and OneDrive.
The guide removes the Preview label and documents that workload identities are reusable only when their Application API host matches the provisioning app’s SAP SuccessFactors API host. It also adds the Application ID URI format and compatibility details for the September 15, 2026 update.
The required Microsoft Entra Connect version changed from 2.5.79.0 to 2.6.84.0 or later. The documentation also now requires application-based authentication to maintain directory synchronization and avoid service disruptions.
