The documentation now states that all authentication strength policy properties and OAuth2 permission grants created through user or administrator consent are included in backup and recovery.
Day in brief
Hard Deletion Protection preview guidance details seven-day Entra object protection
The period’s main update is new preview guidance for Hard Deletion Protection in Microsoft Entra Backup and Recovery. The documentation also moves an SSPR enforcement date to February 2027, expands documented backup coverage, and adds detailed domainless SAML federation setup guidance for External ID.
- Hard Deletion Protection guidance defines a seven-day recovery safeguard
Entra ID · SecurityA new preview article explains how to protect supported Microsoft Entra objects from permanent deletion during the first seven days after soft deletion. It covers prerequisites, supported object types, behavior, audit logging, and setup; configuration is permanent and each operation supports up to 20 objects per type.
- SSPR directory-property enforcement moves to February 2027
Entra ID · AuthenticationThe SSPR guidance now says the service will stop accepting unregistered directory-sourced properties for verification in February 2027, replacing the October 5, 2026 date. The registration-campaign note was removed, so users should explicitly register authentication methods before enforcement.
- Backup coverage now includes authentication strengths and OAuth2 grants
Entra ID · GeneralMicrosoft Entra Backup and Recovery documentation now includes all authentication strength policy properties and OAuth2 permission grants created through user or administrator consent among recoverable data.
- External ID adds domainless SAML federation configuration detail
External ID · StandardsThe guidance adds Microsoft Graph and Graph PowerShell configuration methods and clarifies certificate, endpoint, and domain requirements, including use of a Base64-encoded public certificate and HTTPS endpoints.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
9 updates
Microsoft Entra ID
8 updatesRecover Objects
Doc updateThe recovery guidance now links to Hard Deletion Protection, which blocks permanent deletion of supported objects during the first seven days after soft deletion. It also explains that Protected Actions can protect hard-deletion permissions.
Soft Deletion
New featureMicrosoft Entra Backup and Recovery documentation now describes configuring Hard Deletion Protection to block permanent deletion of supported objects during the first seven days after soft deletion.
Overview
New featureThe documentation describes protecting supported objects from permanent deletion during the first seven days after soft deletion, enabling permanent protection, and viewing protected-object counts.
Troubleshooting
New featureThe troubleshooting guidance now links administrators to configure Hard Deletion Protection for supported objects because hard-deleted objects cannot be recovered or restored.
Prepopulate Contact Information for Self-Service Password Reset
Feature updateAction requiredSSPR will stop accepting unregistered directory-sourced properties for verification in February 2027, instead of October 5, 2026. The registration-campaign note was removed.
Backup Difference Report Recovery Model
New featureAdministrators can configure Hard Deletion Protection to block permanent deletion of supported objects during the first seven days after soft deletion.
The documentation describes protecting supported Microsoft Entra objects from permanent deletion for seven days after soft deletion. It covers prerequisites, supported object types, behavior, audit logging, and setup steps.
Microsoft Entra External ID
1 updateAdd a SAML/WS-Fed identity provider
Doc updateThe documentation adds detailed configuration guidance for domainless SAML federation, including Microsoft Graph and Graph PowerShell methods and clarified certificate, endpoint, and domain settings.