Microsoft Entra ID Update

June 2026 Microsoft Entra updates add new governance, authentication, provisioning, and recovery capabilities. Highlights include external users assigned directly to access packages, improved Kerberos key rotation reliability, Entra Backup and Recovery, and new controls for agent identities and SOC response.

• Microsoft Authenticator now blocks work or school accounts on rooted or jailbroken devices.
• Extended Conditional Access protections for agent user accounts add controls based on agent risk, compliant devices, device platforms, and trusted network conditions.
• Microsoft Entra Backup and Recovery helps restore directory objects after accidental changes or malicious updates.
• New built-in SOC Identity Responder role supports least-privilege identity containment actions such as disabling users, revoking sessions, and forcing password resets.
• AD group enforcement prevents unauthorized changes to designated AD groups outside the Entra provisioning service.

• Microsoft Entra Kerberos key rotation now more reliably handles incoming trust referral flows by trying both primary and secondary keys during decryption.

• External users can be directly assigned to access packages by email and invited as guest users.
• BYOD support for Windows clients using Entra-registered devices is now generally available.
• Domainless SAML IdP federation is now generally available for workforce tenants.
• SCIM 2.0 APIs for Microsoft Entra ID are now generally available in the US Gov cloud.
• Microsoft Entra Backup and Recovery is now generally available.
• A new built-in SOC Identity Responder role is available in public preview for Microsoft Defender-driven identity response.
• AD group enforcement is available in public preview to restrict changes to selected AD groups through Entra provisioning only.

• No admin or user action is required for the iOS Authenticator passkey restore experience change starting August 2026.
• The improved Authenticator passkey restore flow applies to iOS only; Android support will follow.
• Entra Backup and Recovery is always on by default and retains one daily backup for 7 days for tenants with Microsoft Entra ID P1 or P2 licenses.
• The SOC Identity Responder role supports role-assignable groups and optional Privileged Identity Management integration.
• For BYOD support, administrators can assign the Private Application traffic profile to users with internal accounts, including internal guest users.

Product Information

Vendor: Microsoft

Product: Entra ID

Product type: Other

Platform: Web

Vendor release date: Jun 1, 2026

Original release notes: View on vendor site

Published on updatealert.io: Jul 1, 2026

Description: Identity and access management platform for authentication and access control.