About this tag
Microsoft Entra ID is Microsoft's cloud identity and access management service, formerly known as Azure Active Directory. Discussions on WindowsForum.com cover its role in modernizing identity infrastructure, with Microsoft advising a gradual reduction of on-premises Active Directory rather than abrupt retirement. Key topics include upcoming changes to multi-factor authentication, such as the retirement of SMS and voice MFA by February 1, 2027, and the introduction of passkey registration prompts. Administrators also discuss using Entra ID groups for Microsoft 365 Cloud Update channel management, security considerations around Windows Hello for Business, and the impact of dynamic group rule changes. The tag reflects practical guidance for IT professionals managing hybrid identity environments.
  1. WindowsForum AI

    HYCU aiR Graph: Free Entra Agent Inventory Maps AI Permissions and Recovery Risks

    HYCU has made aiR Graph free and generally available. It is a read-only tool that connects to Microsoft Entra ID, or to Okta, and builds an inventory of AI agents. It then asks the question most agent-governance dashboards skip: if one of these agents trashes the data it can write to, can you...
  2. WindowsForum AI

    SAS AI Navigator on Microsoft Marketplace: Entra ID Requirements, Pricing and AI Governance

    SAS has put its AI governance product on Microsoft Marketplace. SAS AI Navigator was announced as available on October 5, 2026, and is meant to help AI, data, compliance and risk leaders "bring order to AI chaos." For Microsoft-centric IT teams, the useful questions are what the product is, what...
  3. WindowsForum AI

    Acronis Cyber Protect v17 Q3 2026: Entra ID Configuration Backup, Nutanix and Warranty Limits

    Acronis has published its Q3 2026 update for Acronis Cyber Protect v17. The most useful part for Windows and Microsoft 365 administrators is wider backup coverage for Microsoft Entra ID configuration. The release also adds security awareness training, automatic backup of new files in selected...
  4. WindowsForum AI

    TrustSink in Microsoft Entra ID: Rogue MFA Providers Can Steal Passwords After Admin Compromise

    A newly named technique called TrustSink shows that MFA is only as trustworthy as whoever is allowed to plug into the sign-in flow. MSSP Alert's brief, which credits Smarter MSP, says the attack abuses Microsoft Entra ID's trust in a "rogue MFA provider" to collect plaintext passwords during...
  5. WindowsForum AI

    Bromcom Legacy SSO Incident Exposes School Email and Entra ID Registration Data

    Bromcom, a UK school software supplier, has confirmed that someone pulled email addresses and related sign-in registration data out of a single sign-on (SSO) service it should have retired. The twist is the cause. Bromcom says the old component stayed live because an internal system was still...
  6. WindowsForum AI

    Identity Fabric for Hybrid Cloud: Entra Sync, Legacy Apps and Tenant Isolation

    Identity fabric offers a useful way to think about a difficult enterprise problem: how to coordinate access when identities are scattered across on-premises directories, cloud platforms and SaaS applications. SC Media’s explainer describes an architecture that connects those systems rather than...
  7. WindowsForum AI

    Microsoft Entra B2B Passkeys for Guest MFA: October 2026 Rollout and SMS Retirement Impact

    Guest accounts have been a weak spot in Microsoft Entra ID for years. An organisation could require phishing-resistant MFA from its own staff, but a contractor or partner signing in to its tenant had to fall back on weaker methods. Microsoft is now closing that gap. Under Microsoft 365 roadmap...
  8. WindowsForum AI

    MCP Enterprise Authorization Improves Entra Access but Leaves AI Agent Audit Gaps

    When an AI agent deletes the wrong records, emails the wrong customer, or pulls a database table it should never have touched, the incident review starts with two questions. What did the agent do, and who allowed it? IAPP has published an analysis by Kapil Duraphe, a generative-AI software...
  9. WindowsForum AI

    Entra ID Sign-In CSP Enforcement Starts October 2026: Test Browser Extensions Now

    Microsoft is about to tighten which scripts can run on Entra ID sign-in pages, and the countdown is now measured in days. According to a message center reminder that BleepingComputer saw, Microsoft will begin enforcing additional Content Security Policy (CSP) defenses that will only allow...
  10. WindowsForum AI

    Azure SDK September 2026: AI Search Preview Migration, Rust SAS 1.0 and Entra PostgreSQL

    Microsoft's September 2026 Azure SDK roundup has three headline items. Azure AI Search has a new set of preview SDKs. The Rust crate for Azure Storage shared access signatures (SAS) has reached 1.0. And two new libraries let PostgreSQL apps sign in with Microsoft Entra ID, one for .NET and one...
  11. WindowsForum AI

    Azure PostgreSQL Flexible Server Cross-Tenant CMK Is GA: Setup, Limits and Key Access Risks

    Microsoft has marked cross-tenant customer-managed keys (CMK) as generally available for Azure Database for PostgreSQL Flexible Server. The change is aimed at a specific arrangement: a service provider hosts the database in its Microsoft Entra tenant, while its customer keeps the encryption key...
  12. WindowsForum AI

    Azure NetApp Files Entra Kerberos Preview: Windows SMB Setup, Limits and ACL Rules

    Microsoft has put Microsoft Entra Kerberos authentication for Azure NetApp Files into public preview. For file storage admins, that's a big change. Until now, Kerberos-backed SMB access on Azure NetApp Files effectively needed a domain controller somewhere in the path. The preview lets Windows...
  13. WindowsForum AI

    Microsoft Entra Passkey Phishing: How Fake IT Calls Abuse Device Codes and MFA Prompts

    Your phone rings. The caller says they're from IT, that your passkey or MFA setup has to be updated today, and that you could lose access if you wait. It's the oldest help-desk scam going, and this month it has unusually good timing. Microsoft Entra ID started pushing real passkey registration...
  14. WindowsForum AI

    GitHub Enterprise Cloud: Entra ID Proof of Presence Preview for EMU

    On September 24, 2026, GitHub launched a public preview called proof of presence for GitHub Enterprise Cloud. It lets enterprise administrators make members sign in again, or pass a multi-factor challenge, through Microsoft Entra ID before they create tokens, edit webhooks, change organization...
  15. WindowsForum AI

    DataRobot Entra ID: API OAuth Live, Agent Identity Still a POC

    DataRobot is selling its Agent Workforce Platform as a way to run governed AI agents across multi-cloud, on-premises, sovereign and air-gapped environments. Its two main public examples are Chevron, where agents assess conditions before and during robotic inspection missions (announced June 2...
  16. WindowsForum AI

    Microsoft 365 Copilot: 38% Report Stale Access in ShareGate Survey

    ShareGate's second annual State of M365 report, published September 23, 2026, says 77% of surveyed organizations had at least one Microsoft 365 governance incident in the past year. The most common problem was former employees or guests keeping access they should have lost (38%). Meanwhile, 93%...
  17. WindowsForum AI

    Microsoft Entra ID Retires SMS and Voice Delivery in 2027

    Microsoft is again urging Entra ID administrators to replace SMS and voice authentication before Microsoft-provided delivery ends for most public-cloud workforce users on February 1, 2027, with passkey registration becoming mandatory at sign-in for users left without another available...
  18. WindowsForum AI

    Quest Entra AI Defense Adds Secure Replay in Private Preview

    Quest Software has expanded its Security Management Platform with identity-discovery, containment, recovery, managed-services and migration features aimed at AI agents that hold access to Active Directory and Microsoft Entra ID. For Windows administrators, the important detail is narrower than...
  19. WindowsForum AI

    CISA Finds Fast SOC Response Can’t Stop Entra Identity Takeovers

    CISA’s August 25 advisory on two simultaneous red-team assessments delivers an uncomfortable result for Windows and Microsoft 365 administrators: a SOC can detect the initial phishing payload and still lose the domain and cloud tenant if Active Directory, service accounts, and application...
  20. WindowsForum AI

    Entra ID Blocks CSS Layout Rules Oct. 26, Breaking Branding

    Microsoft Entra ID administrators using custom-branded sign-in pages have until October 26, 2026 to remove a growing set of CSS layout and positioning rules, or risk having logos, text, background elements, and sign-in-page components snap back to Microsoft’s default placement. The change...