Views
3

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

Update Summary

February 2026 Microsoft Entra updates add Lifecycle Workflows enhancements, External ID sign-in and MFA improvements, and new admin controls across identity governance, provisioning, and network access. The release also includes an upcoming security change to block hard match for users with Microsoft Entra roles.

Update Details

Security

  • Microsoft Entra Connect and Cloud Sync will block hard-matching a new Active Directory user to an existing cloud-managed user that has Microsoft Entra roles, reducing the risk of privilege takeover.
  • Microsoft Authenticator will add jailbreak/root detection for Microsoft Entra credentials on Android, with a progression from warning to blocking to wipe mode.

New Features

  • Lifecycle Workflows Attribute Changes trigger now supports Custom security attributes, Directory extension attributes, EmployeeOrgData attributes, and On-premises attributes 1–15.
  • Lifecycle Workflows can now be managed with Administrative Units for delegated workflow administration and scoped permissions.
  • Microsoft Entra External ID now supports OAuth 2.0 device authorization grant flow for input-constrained devices.
  • Microsoft Entra External ID now supports sign-in with username/alias as an alternate identifier.
  • External Multifactor Authentication (External MFA) is now generally available.
  • Microsoft Entra External ID now supports custom banned password lists.
  • Bring Your Own Device support for Windows using Microsoft Entra registration is available in public preview.
  • Global Secure Access now supports customizable block pages with tenant-wide text and limited markdown links.
  • Microsoft Entra Connect Sync now supports Windows Server 2025.
  • The My Account homepage now shows a more task-focused experience in public preview.
  • Microsoft Entra provisioning service is now available in Microsoft Azure operated by 21Vianet.
  • Approvers can now revoke previously approved access package assignments in My Access.

Hints

  • The Microsoft Entra Connect Sync .msi is available only from the Microsoft Entra admin center under Microsoft Entra Connect.
  • Microsoft recommends Cloud Sync for customers considering new sync deployments.
  • For the hard-match security change, mitigation steps are required if a hard match error occurs after June 1, 2026.
  • Custom block pages in Global Secure Access can include links to Terms of Use, ServiceNow, IT ticketing, or MyAccess workflows.
Product Information

Vendor: Microsoft

Product: Entra ID

Version: February 2026

Release date: Feb 1, 2026