Updates Archives

Group claims in Azure AD tokens

User group membership information can be emitted from SAML and OIDC/OAuth tokens issued by Azure AD so organizations so apps that require this information can be managed and secured from the cloud.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Azure Active Directory activity logs integration with Diagnostics Logs for Azure Monitor and Log Analytics in Azure Monitor

Gain insights from Azure AD user activity logs stored in an Azure storage account and streamed to your preferred SIEM or custom environment, or integration with Log Analytics in Azure Monitor directly in the Azure portal.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features

Home realm discovery during sign-in for Microsoft 365 services

We are changing our Azure Active Directory (Azure AD) sign-in behavior to make room for new authentication methods and improve usability. During sign-in, Azure AD determines where a user needs to authenticate. Azure AD makes intelligent decisions by reading organization and user settings for the username entered on the sign-in page. This is a step towards a password-free future that enables additional credentials like FIDO 2.0.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Services
• Features

More sign-in options for Microsoft accounts in Microsoft 365

Target availability: Q2 2019

We're updating the Microsoft 365 sign-in page for Azure Active Directory (Azure AD) to add a new sign-in options link. This link will be added only to sign-in pages that accept personal Microsoft accounts.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Services
• Features

Azure AD password protection

Azure AD password protection helps you eliminate easily guessed passwords from your environment, which can dramatically lower the risk of being compromised by a password spray attack.

• Microsoft Entra ID (formerly Azure AD)
• Security
• Features