Azure updates

Home realm discovery during sign-in for Microsoft 365 services

We are changing our Azure Active Directory (Azure AD) sign-in behavior to make room for new authentication methods and improve usability. During sign-in, Azure AD determines where a user needs to authenticate. Azure AD makes intelligent decisions by reading organization and user settings for the username entered on the sign-in page. This is a step towards a password-free future that enables additional credentials like FIDO 2.0.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Services
• Features

More sign-in options for Microsoft accounts in Microsoft 365

Target availability: Q2 2019

We're updating the Microsoft 365 sign-in page for Azure Active Directory (Azure AD) to add a new sign-in options link. This link will be added only to sign-in pages that accept personal Microsoft accounts.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Services
• Features

Azure AD password protection

Azure AD password protection helps you eliminate easily guessed passwords from your environment, which can dramatically lower the risk of being compromised by a password spray attack.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Send your Azure Active Directory data to Azure Log Analytics

The ability to forward your Azure Active Directory logs to Azure Log Analytics is now available.

• Log Analytics
• Microsoft Entra ID (formerly Azure AD)
• Azure Monitor
• Security
• Features

Ability to Diagnose and resolve hybrid identity directory errors is now available

Identify and remediate directory errors caused by duplicate user attributes and orphaned objects, which complicate synchronizing your AD and Azure AD hybrid identity environment.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

System-assigned Managed Identity for Virtual Machines and Virtual Machine Scale Sets is now available

Use a system assigned managed identity with a Virtual Machine and Virtual Machine Scale Sets.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Self-service password reset from the Windows 10 sign in for hybrid domain joined devices is now available

Windows 10 devices that are domain-joined to both on-premises AD and cloud Azure AD allow user self-service password reset from the sign in screen.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Self-service password reset from the Windows 7, 8, and 8.1 sign in screens is in public preview

Users with an Azure AD account can now reset their password from the sign in screen of devices using the Windows 7, 8, and 8.1 operating systems.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Virtual network peering across Azure Active Directory tenants

Virtual network peering is now available for virtual networks that belong to subscriptions in different Azure Active Directory tenants.

• Virtual Network
• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Azure Active Directory conditional access in Azure Databricks

Azure Databricks now supports Azure Active Directory (Azure AD) conditional access, which allows administrators to control where and when users are permitted to sign in to Azure Databricks. Some of the common concerns this addresses include restricted sign-in access, limited network location access, managing the type of device access as well as restricted access to client applications.

• Microsoft Entra ID (formerly Azure AD)
• Azure Databricks
• Security
• Services

Azure Active Directory Integration with Azure Files in preview

Azure Files Azure AD Integration for SMB access using Azure AD Domain Services is now available in preview.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Services

Microsoft Identity Manager support for group managed service account (gMSA) configuration on select services is in public preview

Microsoft Identity Manager 2016 SP1 administrators can now configure group managed service accounts (gSMA) on select services to provide and eliminate the need for administrators to store static service accounts passwords in a ‘password vault’.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Azure AD Conditional Access: Managed browser support for iOS/Android platforms now in preview

This feature adds browser support when using application-based conditional access on iOS and Android in the Azure portal.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Microsoft Identity Manager Graph Connector to manage guest access is in public preview

This feature enables IT to administrator manage identities for B2B guest access via app proxy to on-prem apps which requires an on-premises account.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Azure AD conditional access for country codes is in public preview

Set Azure Active Directory conditional access policies based on user country code.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features