Thursday, 1 October 2026

AD FS and PingFederate guidance now requires Connect 2.6.84.0 and app authentication

Two provisioning hardening updates carry the operational weight: AD FS and PingFederate guidance now calls for Microsoft Entra Connect 2.6.84.0 or later plus application-based authentication, while broader Connect Sync guidance moves its minimum-version deadline to April 7, 2027. The remaining updates standardize Zscaler names and setup terminology.

• Workload ID · Provisioning

  AD FS and PingFederate hardening raises the Connect version requirement

  The required Microsoft Entra Connect version changes from 2.5.79.0 to 2.6.84.0 or later. The guidance also requires application-based authentication to maintain directory synchronization and avoid service disruptions.

• Entra ID · Provisioning

  Connect Sync minimum-version deadline moves to April 7, 2027

  The deadline moves from September 30, 2026, to April 7, 2027, with Microsoft Entra Connect Sync version 2.5.79.0 or later required. Synchronization services will fail until the upgrade is completed if the requirement is not met.

• Entra ID · Authentication

  Zscaler Authentication Service replaces older provisioning terminology

  The provisioning tutorial replaces “Zidentity” and “Zscaler Provisioning” with “Zscaler Authentication Service” and updates the related titles, prerequisites, app-role guidance, and provisioning steps. Administrators following the tutorial should use the revised service name when configuring provisioning and SSO.

• Entra ID · Provisioning

  Zscaler ZNet naming is standardized across provisioning guidance

  The guide now consistently identifies the application, tenant, SCIM API, and gallery entry as “Zscaler ZNet.” New configurations should use that name when locating the application in the Microsoft Entra gallery; existing configurations require no action.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.