Daily.Entra.NewsMicrosoft Entra’s most consequential change is the planned retirement of custom CSS layout and positioning properties in company branding by late October 2026. The schedule blocks new use from July 21, 2026, and affected branding will revert to default layouts after retirement. Other updates primarily refresh FIDO2 hardware references and clarify authentication terminology.
Entra ID · AuthenticationMicrosoft Entra will retire custom CSS layout and positioning properties in company branding by late October 2026 to enhance security and reduce phishing risks. New use is blocked from July 21, 2026, and branding will revert to default layouts after retirement.
Entra ID · AuthenticationThe FIDO2 hardware reference now reflects FIDO Metadata Service version 275, with updated model entries, AAGUIDs, capability indicators, and newly listed authenticators. Use the refreshed table to verify hardware eligibility and supported capabilities.
Entra ID · AuthenticationCompatibility indicators were updated for several Arculus, Feitian, Hyper FIDO, and IDmelon authenticators, while multiple vendor entries were removed. Use the revised compatibility table when evaluating or deploying FIDO2 authenticators.
Entra ID · StandardsThe SAML protocol reference now labels synced passkeys as phishing-resistant MFA and clarifies that the certificate-based authentication designation applies to multi-factor CBA. The associated SAML mappings are unchanged.
The Optional Claims Reference now labels synced passkeys as PRMFA and specifies that the PRMFA certificate-based authentication entry applies to multi-factor CBA. The clearer labels help distinguish authentication methods when interpreting optional claims.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Microsoft Entra ID will retire custom CSS layout and positioning properties in company branding by late October 2026 to enhance security and reduce phishing risks. Organizations using these properties must update branding configurations before then; new use will be blocked from July 21, 2026. Branding will revert to default layouts after retirement.
The document date changed from August 18 to August 20, 2026, and existing vendor entries were reordered. Their displayed identifiers and support indicators remain unchanged.
The security key entry’s table formatting was corrected by removing an extra space before a separator.
The documentation now reflects FIDO Metadata Service version 275, with updated FIDO2 model entries, AAGUIDs, and capability indicators, including newly listed authenticators.
The documentation updates compatibility indicators for several Arculus, Feitian, Hyper FIDO, and IDmelon authenticators and removes multiple vendor entries.
The vendor table was re-rendered in its original order, with minor whitespace and line-formatting changes. Vendor names and support indicators are unchanged.
Several FIDO2 hardware vendor entries were reordered to restore their previous sequence. Product names, identifiers, and support indicators remain unchanged.
Microsoft Entra ID will support passkey registration and sign-in for B2B users to meet resource tenant MFA requirements, enhancing phishing resistance. This feature, enabled by default, rolls out from October 2026 to February 2027, requiring no admin action but recommending policy reviews to align user scopes and MFA settings.
The reference now explicitly labels synced passkeys as PRMFA and specifies that the PRMFA certificate-based authentication entry applies to multi-factor CBA.
The documentation now labels synced passkeys as phishing-resistant MFA and clarifies that this designation for certificate-based authentication applies to multi-factor CBA. The associated SAML mappings are unchanged.
