Harden Update Ad Fs Pingfederate
In brief
The required Microsoft Entra Connect version changed from 2.5.79.0 to 2.6.84.0 or later. The documentation also now requires application-based authentication to maintain directory synchronization and avoid service disruptions.
What Entra admins need to know
Upgrade Microsoft Entra Connect to version 2.6.84.0 or later and configure application-based authentication by the stated deadline.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
The comparison below shows only the changed extract. Use the full-page view for complete context.
As part of increasing the security posture of Microsoft Entra Connect, Microsoft deployed a dedicated first-party application to enable the synchronization between Active Directory and Microsoft Entra ID. This new application will manifest as a first party service principal called the "Microsoft Entra AD Synchronization Service" (Application Id: 6bf85cfa-ac8a-4be5-b5de-425a0d0dc016) and will be visible in the Enterprise Applications experience within the Microsoft Entra admin center. This application is critical for the continued operation of on-premises to Microsoft Entra ID synchronization functionality through Entra Connect.
We have since released a new version (2.5.79.0)newer versions of Microsoft Entra Connect that containssupport this service change. AllTo maintain directory synchronization and avoid service disruptions, customers are required tomust upgrade to the minimum versionsMicrosoft Entra Connect version 2.6.84.0 or later and configure application-based authentication by April 7, 2027, to avoid service disruptions.2027.
Expected impacts
If you aren’t upgraded to the minimum required version (2.5.79.6.84.0), you might encounter the following impact to the Microsoft Entra Connect Sync service when the service change takes effect:
All synchronization services in Microsoft Entra Connect Sync will fail.
To avoid any service impact, customers should be on the following version by April 7, 2027:
Version 2.5.79.02.6.84.0 or higher.
The Microsoft Entra Connect Sync .msi installation file for this version is exclusively available on Microsoft Entra Admin Center under Microsoft Entra Connect.
@@ -12,11 +12,11 @@ ms.subservice: hybrid-connect As part of increasing the security posture of Microsoft Entra Connect, Microsoft deployed a dedicated first-party application to enable the synchronization between Active Directory and Microsoft Entra ID. This new application will manifest as a first party service principal called the "Microsoft Entra AD Synchronization Service" (Application Id: `6bf85cfa-ac8a-4be5-b5de-425a0d0dc016`) and will be visible in the Enterprise Applications experience within the Microsoft Entra admin center. This application is critical for the continued operation of on-premises to Microsoft Entra ID synchronization functionality through Entra Connect. -We have since released a new version (2.5.79.0) of Microsoft Entra Connect that contains this service change. All customers are required to upgrade to the minimum versions by April 7, 2027, to avoid service disruptions.+We have since released newer versions of Microsoft Entra Connect that support this service change. To maintain directory synchronization and avoid service disruptions, customers must upgrade to Microsoft Entra Connect version 2.6.84.0 or later and configure application-based authentication by April 7, 2027. ## Expected impacts -If you aren’t upgraded to the minimum required version (2.5.79.0), you might encounter the following impact to the Microsoft Entra Connect Sync service when the service change takes effect:+If you aren’t upgraded to the minimum required version (2.6.84.0), you might encounter the following impact to the Microsoft Entra Connect Sync service when the service change takes effect: All synchronization services in Microsoft Entra Connect Sync will fail. @@ -27,7 +27,7 @@ All synchronization services in Microsoft Entra Connect Sync will fail. To avoid any service impact, customers should be on the following version by April 7, 2027: -Version [2.5.79.0](/entra/identity/hybrid/connect/reference-connect-version-history#25790) or higher.+Version [2.6.84.0](/entra/identity/hybrid/connect/reference-connect-version-history#26840) or higher. The Microsoft Entra Connect Sync .msi installation file for this version is exclusively available on Microsoft Entra Admin Center under [Microsoft Entra Connect](https://entra.microsoft.com/#view/Microsoft_AAD_Connect_Provisioning/AADConnectMenuBlade/%7E/GetStarted). 