What If Tool
Doc updateThe Conditional Access What If tool table now uses a different sample UserId in all four examples.
Day in brief
Four Global Secure Access connector versions marked deprecated with immediate-update guidance
This was a documentation-heavy day led by an explicit Global Secure Access connector support warning and clearer Conditional Access guidance on Android Microsoft Authenticator’s Google Play Integrity dependency. The remaining updates mostly revise example identifiers, consent-policy application IDs, links, or sample values across Entra ID, Workload ID, and ID Governance. All 19 supplied changes were updates; there were no new, removed, or Message Center items.
- Global Secure Access version history marks four connector releases deprecated
Global Secure Access · GeneralVersions 1.5.612.0, 1.5.402.0, 1.5.132.0, and 1.5.36.0 are marked deprecated. Users of version 1.5.612.0 or earlier are instructed to update immediately to the latest version to retain fully supported features.
- Android Authenticator guidance documents the Google Play Integrity denial path
Entra ID · AuthenticationConditional Access guidance states that Android Microsoft Authenticator uses the Google Play Integrity API for jailbreak detection. If the API is unavailable, requests are denied unless the policy is disabled, giving administrators a specific path for investigating Android access denials.
- Consent-policy guidance lists new IDs for six mail clients
Entra ID · DeveloperThe Manage App Consent Policies guidance now lists new application IDs for Apple Mail, Spark Email, eM Client, Android-Samsung, Android-Mail, and Thunderbird. Administrators using these entries should compare the documented IDs with their consent-policy configurations.
- PIM custom-extension examples standardize a different client ID
ID Governance · Microsoft identity platformThe endpoint URI, calling application claim, and resourceId examples now consistently use a different application client ID. Administrators configuring Privileged Identity Management custom extensions should use the updated identifier values.
- Federated-credential PowerShell example changes its Subject value
Workload ID · DeveloperThe Workload Identity Federation guidance changes the example Subject used in the New-AzADAppFederatedCredential command for a managed identity. Administrators copying the command should use the updated Subject value.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
19 updates
Microsoft Entra ID
10 updatesManage App Consent Policies
Doc updateThe consent policy documentation now lists revised application IDs for Apple Mail, Spark Email, eM Client, Android-Samsung, Android-Mail, and Thunderbird.
Manage App Consent Policies
Doc updateThe consent-policy documentation now lists new application IDs for Apple Mail, Spark Email, eM Client, Android-Samsung, Android-Mail, and Thunderbird.
Grant Admin Consent
Doc updateThe documentation examples now show revised object IDs for Microsoft Graph and other resource APIs while retaining the same consent scenarios and permissions.
Grant Admin Consent
Doc updateThe guide now uses different Microsoft Graph resource API object IDs in delegated- and application-permission consent examples; the documented permissions and consent type remain unchanged.
Assignment Network
Doc updateThe Conditional Access documentation now describes Android Microsoft Authenticator’s use of the Google Play Integrity API for jailbreak detection and the resulting access denial if the API is unavailable.
Assignment Network
Doc updateThe updated Conditional Access documentation states that Microsoft Authenticator on Android uses Google Play Integrity API for jailbreak detection. If the API is unavailable, requests are denied unless the policy is disabled.
Sap Netweaver Tutorial
Doc updateTwo SAP Principal Propagation with Azure API Management references in the tutorial now use updated links; the surrounding guidance remains unchanged.
Sap Netweaver Tutorial
Doc updateThe tutorial updates two references to Azure API Management guidance for SAP Principal Propagation, including associated learning links.
The Linux device registration troubleshooting documentation now shows a different tenant ID in its example output.
Microsoft Entra ID Governance
2 updatesThe documentation now consistently uses a different application client ID in the endpoint URI, calling application claim, and `resourceId` examples.
The documentation now uses revised Application (client) ID examples in the endpoint URI and `resourceId` configuration sample.
Microsoft Entra Workload ID
6 updatesThe PowerShell example now uses a different Subject value for the managed identity federated credential.
The documentation changes the example `-Subject` value in the `New-AzADAppFederatedCredential` command.
How Managed Identities Work Vm
Doc updateThe curl example now uses client_id `00001111-aaaa-2222-bbbb-3333cccc4444` instead of the previous value.
How Managed Identities Work Vm
Doc updateThe VM managed identity documentation changes the client_id value in its curl token-request example.
The documentation updates the name or identifier of the dedicated first-party service principal used to synchronize Active Directory with Microsoft Entra ID.
The documentation wording about the dedicated first-party application and service principal used for synchronization between Active Directory and Microsoft Entra ID was revised.
Version History
RetirementAction requiredThe version history marks versions 1.5.612.0, 1.5.402.0, 1.5.132.0, and 1.5.36.0 as deprecated and instructs users of 1.5.612.0 or earlier to update immediately.