Reading Time: 3 minutes![Microsoft Entra ID](https://dirteam.com/sander/wp-content/uploads/sites/2/2023/11/Microsoft-Entra-ID-300x157.png)
Entra ID, previously known as Azure AD is Microsoft's Identity Management-as-a-Service solution, offering seamless access, easy collaboration, efficiency in IT processes and improved security and compliance. In its Release Notes for Entra ID and through the Microsoft 365 Message Center, Microsoft communicated the following planned, new and changed functionality for Entra ID for February 2024:
What's Planned
Microsoft Entra ID Protection: "Low" risk age out Planned
Service category: Identity Protection
Product capability: Identity Security & Protection
Starting March 31st, 2024, all low risk detections and users in Microsoft Entra ID Protection that are older than 6 months will be automatically aged out and dismissed. This allows organizations to focus on more relevant risks and provides a cleaner investigation environment.
What's Deprecated
Windows Azure Active Directory Connector for Forefront Identity Manager Deprecated
Service category: Microsoft Identity Manager
Product capability: Inbound to Microsoft Entra ID
The Windows Azure Active Directory Connector for Forefront Identity Manager (FIM WAAD Connector) from 2014 was deprecated in 2021. The standard support for this connector ends in April 2024. Organizations should remove this connector from their Microsoft Identity Manager (MIM) sync deployment, and instead use an alternative provisioning mechanism.
What's New
Granular filtering of Conditional Access policy list General Availability
Service category: Conditional Access
Product capability: Access Control
Conditional access policies can now be filtered on actor, target resources, conditions, grant control and session control. The granular filtering experience can help admins quickly discover policies containing specific configurations.
Microsoft Entra ID Protection: New premium user risk detection; Suspicious API Traffic General Availability
Service category: Identity Protection
Product capability: Identity Security & Protection
Microsoft has released a new premium user risk detection in Identity Protection called Suspicious API Traffic. This detection is reported when Identity Protection detects anomalous Graph traffic by a user. Suspicious API traffic might suggest that a user account is compromised and abused to conduct reconnaissance in the environment.
Service category: Identity Protection
Product capability: Identity Security & Protection
Previously supported only in the portal, Identity Protection is a powerful tool that empowers admins to proactively manage identity risks. Now available in the Azure Mobile app, admins can respond to potential threats with ease and efficiency. This feature includes comprehensive reporting, offering insights into risky behaviors such as compromised user accounts and suspicious sign-ins.
- The Risky users report provides visibility into accounts flagged as compromised or vulnerable. Actions such as blocking/unblocking sign-ins, confirming the legitimacy of compromises, or resetting passwords are conveniently accessible, ensuring timely risk mitigation.
- The Risky sign-ins report provides a detailed overview of suspicious sign-in activities, aiding admins in identifying potential security breaches. While capabilities on mobile are limited to viewing sign-in details, admins can take necessary actions through the portal, such as blocking sign-ins. Alternatively, admins can choose to manage the corresponding risky user's account until all risks are mitigated.
Stay ahead of identity risks effortlessly with Identity Protection on the Azure Mobile app. These capabilities are intended to provide user with the tools to maintain a secure environment and peace of mind for their organization.
New provisioning connectors in the Microsoft Entra Application Gallery General Availability
Service category: App Provisioning
Product capability: 3rd Party Integration
Microsoft has added the following new applications in the Entra App gallery with Provisioning support. Admins can now automate creating, updating, and deleting of user accounts for these newly integrated apps:
New Federated Apps available in Microsoft Entra Application gallery General Availability
Service category: Enterprise Apps
Product capability: 3rd Party Integration
In February 2024, Microsoft has added the following new applications in the Entra App gallery with Federation support:
- Presswise
- Stonebranch Universal Automation Center (SaaS Cloud)
- ProductPlan
- Bigtincan for Outlook
- Blinktime
- Stargo
- Garage Hive BC v2
- Avochato
- Luscii
- LEVR
- XM Discover
- Sailsdock
- Mercado Eletronico SAML
- Moveworks
- Silbo
- Alation Data Catalog
- Papirfly SSO
- Secure Cloud User Integration
- AlbertStudio
- Automatic Email Manager
- Streamboxy
- NewHotel PMS
- Ving Room
- Trevanna Tracks
- Alteryx Server
- RICOH Smart Integration
- Genius
- Othership Workplace Scheduler
- GitHub Enterprise Managed User – ghe.com
- Thumb Technologies
- Freightender SSO for TRP (Tender Response Platform)
- BeWhere Portal (UPS Access)
- Flexiroute
- SEEDL
- Isolocity
- SpotDraft
- Blinq
- Cisco Phone OBTJ
- Applitools Eyes
What's Changed
Expansion of the Conditional Access re-authentication policy for additional scenarios Public Preview
Service category: Conditional Access
Product capability: Identity Security & Protection
Re-authentication policies lets admins require people in the organization to interactively provide their credentials again, typically before accessing critical applications and taking sensitive actions. Combined with the Conditional Access session control Sign-in frequency, admins can require re-authentication for users and sign-ins with risk, or for Intune enrollment. With this public preview, admins can now require re-authentication on any resource protected by Conditional Access.
Login