Skip to content

Commit 01d18ae

Browse files
Merge pull request #239783 from OWinfreyATL/owinfreyATL-November2022-Archive
November 2022 added to archive
2 parents 8b08947 + 4182ae7 commit 01d18ae

File tree

1 file changed

+169
-0
lines changed

1 file changed

+169
-0
lines changed

articles/active-directory/fundamentals/whats-new-archive.md

Lines changed: 169 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,175 @@ The What's new in Azure Active Directory? release notes provide information abou
2929

3030
---
3131

32+
## November 2022
33+
34+
### General Availability - Use Web Sign-in on Windows for password-less recovery with Temporary Access Pass
35+
36+
37+
38+
**Type:** Changed feature
39+
**Service category:** N/A
40+
**Product capability:** User Authentication
41+
42+
The Temporary Access Pass can now be used to recover Azure AD-joined PCs when the EnableWebSignIn policy is enabled on the device. This is useful for when your users don't know, or have, a password. For more information, see: [Authentication/EnableWebSignIn](/windows/client-management/mdm/policy-csp-authentication#authentication-enablewebsignin).
43+
44+
45+
---
46+
47+
### Public Preview - Workload Identity Federation for Managed Identities
48+
49+
50+
51+
**Type:** New feature
52+
**Service category:** Managed identities for Azure resources
53+
**Product capability:** Developer Experience
54+
55+
Developers can now use managed identities for their software workloads running anywhere, and for accessing Azure resources, without needing secrets. Key scenarios include:
56+
57+
- Accessing Azure resources from Kubernetes pods running on-premises or in any cloud.
58+
- GitHub workflows to deploy to Azure, no secrets necessary.
59+
- Accessing Azure resources from other cloud platforms that support OIDC, such as Google Cloud.
60+
61+
For more information, see:
62+
- [Configure a user-assigned managed identity to trust an external identity provider (preview)](../develop/workload-identity-federation-create-trust-user-assigned-managed-identity.md)
63+
- [Workload identity federation](../develop/workload-identity-federation.md)
64+
- [Use an Azure AD workload identity (preview) on Azure Kubernetes Service (AKS)](../../aks/workload-identity-overview.md)
65+
66+
67+
---
68+
69+
### General Availability - Authenticator on iOS is FIPS 140 compliant
70+
71+
72+
73+
**Type:** New feature
74+
**Service category:** Microsoft Authenticator App
75+
**Product capability:** User Authentication
76+
77+
Authenticator version 6.6.8 and higher on iOS will be FIPS 140 compliant for all Azure AD authentications using push multi-factor authentications (MFA), Password-less Phone Sign-In (PSI), and time-based one-time pass-codes (TOTP). No changes in configuration are required in the Authenticator app or Azure portal to enable this capability. For more information, see: [FIPS 140 compliant for Azure AD authentication](../authentication/concept-authentication-authenticator-app.md#fips-140-compliant-for-azure-ad-authentication).
78+
79+
80+
---
81+
82+
### General Availability - New Federated Apps available in Azure AD Application gallery - November 2022
83+
84+
85+
86+
**Type:** New feature
87+
**Service category:** Enterprise Apps
88+
**Product capability:** 3rd Party Integration
89+
90+
In November 2022, we've added the following 22 new applications in our App gallery with Federation support
91+
92+
[Adstream](../saas-apps/adstream-tutorial.md), [Databook](../saas-apps/databook-tutorial.md), [Ecospend IAM](https://ecospend.com/), [Digital Pigeon](../saas-apps/digital-pigeon-tutorial.md), [Drawboard Projects](../saas-apps/drawboard-projects-tutorial.md), [Vellum](https://www.vellum.ink/request-demo), [Veracity](https://aie-veracity.com/connect/azure), [Microsoft OneNote to Bloomberg Note Sync](https://www.bloomberg.com/professional/support/software-updates/), [DX NetOps Portal](../saas-apps/dx-netops-portal-tutorial.md), [itslearning Outlook integration](https://itslearning.com/global/), [Tranxfer](../saas-apps/tranxfer-tutorial.md), [Occupop](https://app.occupop.com/), [Nialli Workspace](https://ws.nialli.com/), [Tideways](https://app.tideways.io/login), [SOWELL](https://manager.sowellapp.com/#/?sso=true), [Prewise Learning](https://prewiselearning.com/), [CAPTOR for Intune](https://www.inkscreen.com/microsoft), [wayCloud Platform](https://app.way-cloud.de/login), [Nura Space Meeting Room](https://play.google.com/store/apps/details?id=com.meetingroom.prod), [Flexopus Exchange Integration](https://help.flexopus.com/de/microsoft-graph-integration), [Ren Systems](https://app.rensystems.com/login), [Nudge Security](https://www.nudgesecurity.io/login)
93+
94+
You can also find the documentation of all the applications from here https://aka.ms/AppsTutorial,
95+
96+
For listing your application in the Azure AD app gallery, read the details here https://aka.ms/AzureADAppRequest
97+
98+
99+
---
100+
101+
### General Availability - New provisioning connectors in the Azure AD Application Gallery - November 2022
102+
103+
104+
105+
**Type:** New feature
106+
**Service category:** App Provisioning
107+
**Product capability:** 3rd Party Integration
108+
109+
We've added the following new applications in our App gallery with Provisioning support. You can now automate creating, updating, and deleting of user accounts for these newly integrated apps:
110+
111+
- [Keepabl](../saas-apps/keepabl-provisioning-tutorial.md)
112+
- [Uber](../saas-apps/uber-provisioning-tutorial.md)
113+
114+
For more information about how to better secure your organization by using automated user account provisioning, see: [Automate user provisioning to SaaS applications with Azure AD](../app-provisioning/user-provisioning.md).
115+
116+
117+
---
118+
119+
### Public Preview - Dynamic Group pause functionality
120+
121+
122+
123+
**Type:** New feature
124+
**Service category:** Group Management
125+
**Product capability:** Directory
126+
127+
Admins can now pause, and resume, the processing of individual dynamic groups in the Entra Admin Center. For more information, see: [Create or update a dynamic group in Azure Active Directory](../enterprise-users/groups-create-rule.md).
128+
129+
130+
---
131+
132+
### Public Preview - Enabling extended customization capabilities for sign-in and sign-up pages in Company Branding capabilities.
133+
134+
135+
136+
**Type:** New feature
137+
**Service category:** Authentications (Logins)
138+
**Product capability:** User Authentication
139+
140+
Update the Azure AD and Microsoft 365 sign-in experience with new company branding capabilities. You can apply your company’s brand guidance to authentication experiences with pre-defined templates. For more information, see: [Configure your company branding](../fundamentals/customize-branding.md).
141+
142+
143+
---
144+
145+
### Public Preview - Enabling customization capabilities for the Self-Service Password Reset (SSPR) hyperlinks, footer hyperlinks and browser icons in Company Branding.
146+
147+
148+
149+
**Type:** New feature
150+
**Service category:** Directory Management
151+
**Product capability:** Directory
152+
153+
Update the company branding functionality on the Azure AD/Microsoft 365 sign-in experience to allow customizing Self Service Password Reset (SSPR) hyperlinks, footer hyperlinks and browser icon. For more information, see: [Configure your company branding](../fundamentals/customize-branding.md).
154+
155+
156+
---
157+
158+
### General Availability - Soft Delete for Administrative Units
159+
160+
161+
162+
**Type:** New feature
163+
**Service category:** Directory Management
164+
**Product capability:** Directory
165+
166+
Administrative Units now support soft deletion. Admins can now list, view properties of, or restore deleted Administrative Units using the Microsoft Graph. This functionality restores all configuration for the Administrative Unit when restored from soft delete, including memberships, admin roles, processing rules, and processing rules state.
167+
168+
This functionality greatly enhances recoverability and resilience when using Administrative Units. Now, when an Administrative Unit is accidentally deleted, you can restore it quickly to the same state it was at time of deletion. This removes uncertainty around configuration and makes restoration quick and easy. For more information, see: [List deletedItems (directory objects)](/graph/api/directory-deleteditems-list).
169+
170+
171+
---
172+
173+
### Public Preview - IPv6 coming to Azure AD
174+
175+
176+
177+
**Type:** Plan for change
178+
**Service category:** Identity Protection
179+
**Product capability:** Platform
180+
181+
With the growing adoption and support of IPv6 across enterprise networks, service providers, and devices, many customers are wondering if their users can continue to access their services and applications from IPv6 clients and networks. Today, we’re excited to announce our plan to bring IPv6 support to Microsoft Azure Active Directory (Azure AD). This allows customers to reach the Azure AD services over both IPv4 and IPv6 network protocols (dual stack).
182+
For most customers, IPv4 won't completely disappear from their digital landscape, so we aren't planning to require IPv6 or to de-prioritize IPv4 in any Azure Active Directory features or services.
183+
We'll begin introducing IPv6 support into Azure AD services in a phased approach, beginning March 31, 2023.
184+
We have guidance that is specifically for Azure AD customers who use IPv6 addresses and also use Named Locations in their Conditional Access policies.
185+
186+
Customers who use named locations to identify specific network boundaries in their organization need to:
187+
1. Conduct an audit of existing named locations to anticipate potential risk.
188+
1. Work with your network partner to identify egress IPv6 addresses in use in your environment.
189+
1. Review and update existing named locations to include the identified IPv6 ranges.
190+
191+
Customers who use Conditional Access location based policies to restrict and secure access to their apps from specific networks need to:
192+
1. Conduct an audit of existing Conditional Access policies to identify use of named locations as a condition to anticipate potential risk.
193+
1. Review and update existing Conditional Access location based policies to ensure they continue to meet your organization’s security requirements.
194+
195+
We continue to share additional guidance on IPv6 enablement in Azure AD at this link: https://aka.ms/azureadipv6.
196+
197+
198+
---
199+
200+
32201
## October 2022
33202

34203
### General Availability - Upgrade Azure AD Provisioning agent to the latest version (version number: 1.1.977.0)

0 commit comments

Comments
 (0)