Microsoft has updated its Entra platform with new drift detection reports and automated lifecycle management tools to secure guest users and AI agent identities.
The drift detection reports allow administrators to monitor when access permissions deviate from established policy requirements. This update addresses the growing difficulty of maintaining security as organizations scale their cloud and AI-driven workflows.
Automated lifecycle policies now enable organizations to disable or remove guest accounts and AI agent identities that are no longer in use. By automating this cleanup, businesses can mitigate risks associated with unauthorized access and compliance gaps. Application group discovery also extends governance capabilities to groups created within connected applications.
Capture the configuration of your existing tenant settings to detect drift or use as a baseline for other tenants. Check out Configuration Snapshots in Microsoft Entra Tenant Governance. https://t.co/baYse0F6rg Ensure your tenant configuration doesn't drift from defined… pic.twitter.com/iZttQppbDq
Microsoft has integrated cloud firewall controls into Global Secure Access client traffic. Administrators can now enforce SaaS tenant restrictions using custom HTTP headers and implement Continuous Access Evaluation (CAE) to respond to user and device risks in minutes.
The platform also strengthens phishing-resistant authentication through broader support for passkeys, Windows Hello for Business, and macOS Platform SSO. Support for third-party telephony providers, including Soprano, Telesign, and Infobip, has been added to simplify SMS and voice-based authentication.
Microsoft Entra Cloud Sync now supports the synchronization of on-premises Active Directory computer objects to Entra ID. This functionality enables hybrid device join scenarios, reducing operational complexity for IT departments managing mixed environments.
Microsoft Entra now supports integration with Soprano, Telesign, and Infobip for SMS and voice-based authentication methods.
Microsoft Entra Cloud Sync can now synchronize on-premises Active Directory computer objects to Entra ID, facilitating hybrid device join scenarios.