A cross-product view of Microsoft Entra changes related to General.
Configure a Global Secure Access remote network when your customer premises equipment sits behind an upstream NAT router, using IKEv2 NAT Traversal (NAT-T).
When [managing licenses in the Azure portal](https://portal.azure.com/#blade/Microsoft_AAD_IAM/LicensesMenuBlade/Products) or the [Microsoft 365 admin center](https://admin.microsoft.com), you see product names that look something like *Office 365 E3*. When y…
Learn how to manage the Internet Access traffic forwarding profile for Microsoft Entra Internet Access.
Learn how to configure Microsoft Entra Internet Access and Microsoft Defender for Cloud Apps side by side without proxying traffic twice.
Learn about how Global Secure Access helps secure access to your corporate network by restricting access to external tenants.
- Microsoft Entra Cloud Sync agent must be installed on a domain-joined server. We recommend using Windows Server 2025 or Windows Server 2022. You can also deploy Microsoft Entra Cloud Sync on older Windows Server versions that are in extended support; howeve…
Reference list of the egress IP ranges that Global Secure Access uses for outbound internet traffic, so you can allowlist them on target services.
In Microsoft Agent ID, the agent's identity, blueprint, and blueprint principal may all have sponsors associated with them. In addition, agents can have an [agent's user account](agent-users.md) created in order to access user-oriented services. While the Ent…
Web content filtering also supports two optional rule conditions that enable traffic-aware policy enforcement:
With Explicit Forward Proxy, you can use the secure web and AI gateway capabilities of Microsoft Entra Internet Access without installing the Global Secure Access client. Explicit Forward Proxy works with any browser that supports proxy automatic configuratio…
Learn about the new features and documentation improvements in Microsoft Entra role-based access control (RBAC).
IT administrators can now automatically accept SSO permissions on managed Windows devices using a supported registry setting.
Learn how to upload and host your own Proxy Auto-Configuration (PAC) files
Learn how to configure assignment restriction for a user-assigned managed identity in the Azure portal to scope it to specific resource providers.
Use the Migration Policy Analyzer to scan Azure AD B2C custom policies and generate a detailed migration assessment for Microsoft Entra External ID. Start your migration today.
This article lists all releases of Microsoft Entra Connect and Azure AD Sync.
Global Secure Access external user access licensing is supported through Microsoft Entra External ID subscription linking. The administrator must link the subscription in the resource tenant so guest users can access private resources and usage is billed corr…
* [Federated MFA](/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa)
Learn to migrate from Amazon Cognito to Microsoft Entra External ID with step-by-step guidance, feature mapping, and validation strategies.
A Microsoft Entra documentation page was updated: Entra Customer Lockbox Approver.
- **HTTP method request filtering (preview)**: Block or allow specific HTTP methods, such as GET, POST, PUT, PATCH, and DELETE.
Learn how to configure universal tenant restrictions with Global Secure Access for Microsoft traffic.
Learn how to enable the Microsoft traffic profile in Global Secure Access, assign users, install the client, and verify traffic forwarding.
Learn about Microsoft traffic labs for Global Secure Access, including source IP restoration, compliant network checks, and universal tenant restrictions.
This article lists all releases of Microsoft Entra Connect and Azure AD Sync.
Learn how to retrieve data from Microsoft Entra Domain Services.
Learn about some of the virtual network design considerations and resources used for connectivity when you run Microsoft Entra Domain Services.
keywords: Azure Active Directory licensing service plans
Learn about tenant configurations in Microsoft Entra External ID, including the differences between workforce and external tenants.
This is a [privileged role](../privileged-roles-permissions.md). Assign the AI Reader role to users who need to do the following tasks:
Learn how to configure single sign-on between Microsoft Entra ID and AlexisHR.
Learn how to configure assignment restriction for a user-assigned managed identity in the Azure portal to scope it to specific resource providers.
Calculate the Microsoft Sentinel alert noise ratio for Global Secure Access detections and send an alert when false positives or informational closures exceed your threshold.
Check Global Secure Access-related administrator role assignments and identify accounts that need quarterly review.
Create a non-destructive Microsoft Entra recovery preview job scoped to directory objects that affect Global Secure Access.
Run a Microsoft Entra recovery job for directory objects that affect Global Secure Access after reviewing a recovery preview.
Verify that your Global Secure Access configuration backup runbook ran successfully. Send an alert when the runbook fails or misses a scheduled run.
Learn about the new features and documentation improvements in Microsoft Entra role-based access control (RBAC).
This article lists all releases of Microsoft Entra Connect and Azure AD Sync.
These articles provide additional information on working with groups in Microsoft Entra ID.
High-level planning and decision guide for Independent Software Vendors (ISVs) preparing to integrate single sign-on (SSO) with Microsoft Entra ID.
Zoom is available in the following [national cloud deployments](/graph/deployments).
Zscaler B2B User Portal is available in the following [national cloud deployments](/graph/deployments).
Zscaler Beta is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access Administrator is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSCloud is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSNet is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSOne is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSThree is available in the following [national cloud deployments](/graph/deployments).
Zscaler Internet Access ZSTwo is available in the following [national cloud deployments](/graph/deployments).
Zscaler Private Access (ZPA) is available in the following [national cloud deployments](/graph/deployments).
Zscaler Private Access Administrator is available in the following [national cloud deployments](/graph/deployments).
The export.csv file contains all changes that are about to be exported. Each row corresponds to a change for an object in the connector space and the object is identified by the DN attribute. The DN attribute is a unique identifier assigned to an object in th…
|[2.5.79.0](#25790)|23 Oct 2026 (12 months after release of 2.5.190.0)|
* If needed, [create a Microsoft Entra tenant][create-azure-ad-tenant] or [associate an Azure subscription with your account][associate-azure-ad-tenant].
- [Enable Global Secure Access signaling for Microsoft Entra ID and Microsoft Graph](how-to-source-ip-restoration.md#enable-global-secure-access-signaling-for-microsoft-entra-id-and-microsoft-graph)
Learn about the pricing and billing structure for Microsoft Entra External ID, along with steps for linking an external tenant to an Azure subscription.
- [Enable Global Secure Access signaling for Microsoft Entra ID and Microsoft Graph](how-to-source-ip-restoration.md#enable-global-secure-access-signaling-for-microsoft-entra-id-and-microsoft-graph)
Add group members in bulk by using a comma-separated values (CSV) file.
Download group members in bulk in the Microsoft Entra admin center.
Remove group members in bulk operations by using a comma-separated values (CSV) file.
>Editing a group (adding or removing users), it can take up to 24 hours for changes to take effect.
In this flow, the agent can't reuse the user's original token because it was issued for a different audience. Instead, the agent uses the OBO flow to exchange tokens with Microsoft Entra ID, obtaining a new token scoped to the target resource. This token exch…
Learn how agent registry experiences are converging under Microsoft Agent 365, what the change means for Microsoft Entra Agent ID, and how to view all agents in your organization.
Find answers to frequently asked questions about Microsoft Entra External ID. Learn about pricing, features, and the future of Azure AD B2C and External Identities.
Learn how to assign Azure roles to the local administrators group of a Windows device.
Explains the steps that are required to implement Microsoft Entra joined devices in your environment.
Learn how to manage agent identities in the end user experience within Microsoft Entra. View, control, and take action on agents you own or sponsor with ease.
- For Office 365 Exchange Online: `EAS.AccessAsUser.All`, `EWS.AccessAsUser.All`, `IMAP.AccessAsUser.All`, `POP.AccessAsUser.All`.
Microsoft Entra Joined Device Local Administrator
This article tracks the released versions of the Microsoft Entra Private Access Sensor and the changes in each version.
Deploy n8n on Azure Container Apps and secure AI agent workflows with Microsoft Entra Agent ID and Microsoft Graph MCP Server for Enterprise.
Access Microsoft Entra admin center to view and filter agent identities. Streamline tenant oversight with search, filters, and column customization.
| `jobTitle` |Any string value or `null` | ```user.jobTitle -eq "value"``` |
Deploy n8n on Azure Container Apps and secure AI agent workflows with Microsoft Entra Agent ID and Microsoft Graph MCP Server for Enterprise.
Learn how to add and manage owners and sponsors for agent identity blueprints and agent identities in the Microsoft Entra admin center.
Learn how agent registry experiences are converging under Microsoft Agent 365, what the change means for Microsoft Entra Agent ID, and how to view all agents in your organization.
Describes the deprecation of the app manifest (Azure AD Graph format) and attribute differences in the new format.
