7 min read
SMS Codes Just Got an SLA: Native-App MFA Goes GA in Entra External ID
Step-up MFA for Native Authentication in Entra External ID reaches GA. Add email or SMS second-factor to mobile apps without browser redirects—but…
entra-azure
8 min read
Google, Facebook and Apple login now works inside your app — no browser bounce
The ugliest part of mobile sign-in has been the bounce to a system browser and back. Entra External ID just shipped GA…
7 min read
Microsoft Can Add a Graph Permission Tomorrow and Nobody Will Email You
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here's the PowerShell…
4 min read
Your Apple Watch app can finally stop asking customers to log in twice
Microsoft has shipped refresh-token transfer to general availability for Entra External ID, letting Apple Watch companion apps inherit their iPhone app's session…
8 min read
DoD Tenants Are Losing App Permission Policies — Here’s the App-Centric Migration You Can’t Ignore
App-centric management finally lands in the DoD cloud in October 2026, and it quietly retires the app permission policy model your governance…
7 min read
Every Third-Party App in Your Tenant Is About to Grow an Agent. Audit the Consent Grants First.
Teams Admin Center will soon let admins one-click enable agents for apps you already own. Behind that button sits a pile of…
6 min read
A Two-Line OneNote Changelog Is Really a Notes.ReadWrite.All Audit You’ve Been Skipping
Microsoft quietly shipped getNotebookFromWebUrl to Graph v1.0. The method is trivial. The permission it rides on — Notes.ReadWrite.All granted to some forgotten…
8 min read
A Business Central API Just Landed in Your Graph Permission Surface — Here’s the Consent Problem Nobody’s Auditing
Microsoft quietly added Financials APIs for Dynamics 365 Business Central to Graph v1.0. It shows up in the Entra feed for a…
7 min read
Diving into Primary Refresh Tokens and Authentication Strengths in Microsoft Entra ID
Microsoft Entra ID is the backbone of modern identity management, powering secure access to cloud and hybrid resources. At its core, the…
7 min read
Mastering PRT Delayed Renewal in Microsoft Entra ID: Controls, Configurations, and Real-World Scenarios
In the evolving landscape of identity management, the Primary Refresh Token (PRT) stands as a cornerstone of seamless single sign-on (SSO) in…