Thursday, 22 October 2026

Revoked-credential troubleshooting and Netskope coexistence guidance sharpen Entra administrator playbooks

The period’s most consequential change is a new Workload ID troubleshooting guide for revoked application credentials, including Microsoft Graph beta checks and token-impact assessment. Microsoft also expanded Netskope coexistence documentation with a concrete traffic-splitting scenario for Global Secure Access and Netskope. External ID migration guidance now adds Fortytwo as a listed partner.

• Workload ID · Troubleshooting

  Workload ID gains a revoked-credential troubleshooting guide

  The new guide covers revoked-credential error codes, inspection of tokenRevocations on applications and service principals through Microsoft Graph beta, and assessment of revocation effects and possible compromise. It also helps administrators determine whether revoked credentials may still provide access to some resources while existing tokens remain valid.

• Internet Access · Security

  Netskope coexistence guidance adds a private-and-internet traffic split

  The updated scenario documents Global Secure Access handling private application and Microsoft 365 traffic while Netskope captures internet traffic. It provides configuration, verification, and traffic-testing steps for Windows and macOS, including forwarding profiles, Netskope steering exceptions, client settings, and traffic-log validation.

• External ID · General

  External ID migration partners page adds Fortytwo

  The Azure AD B2C to Microsoft Entra External ID migration partners page now lists Fortytwo and updates its publication date, giving migration planners another referenced partner resource.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.