You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We're pleased to announce the new riskDetections API for Microsoft Graph is now in public preview. You can use this new API to view a list of your organization's Identity Protection-related user and sign-in risk detections. You can also use this API to more efficiently query your risk detections, including details about the detection type, status, level, and more.
42
+
43
+
For more information, see the [Risk detection API reference documentation](https://docs.microsoft.com/graph/api/resources/riskdetection?view=graph-rest-beta).
44
+
45
+
---
46
+
47
+
### New Federated Apps available in Azure AD app gallery - June 2019
48
+
49
+
**Type:** New feature
50
+
**Service category:** Enterprise Apps
51
+
**Product capability:** 3rd Party Integration
52
+
53
+
In June 2019, we've added these 22 new apps with Federation support to the app gallery:
For more information about the apps, see [SaaS application integration with Azure Active Directory](https://aka.ms/appstutorial). For more information about listing your application in the Azure AD app gallery, see [List your application in the Azure Active Directory application gallery](https://aka.ms/azureadapprequest).
58
+
59
+
---
60
+
61
+
### Automate user account provisioning for these newly supported SaaS apps
62
+
63
+
**Type:** New feature
64
+
**Service category:** Enterprise Apps
65
+
**Product capability:** Monitoring & Reporting
66
+
67
+
You can now automate creating, updating, and deleting user accounts for these newly integrated apps:
For more information about how to better secure your organization by using automated user account provisioning, see [Automate user provisioning to SaaS applications with Azure AD](https://docs.microsoft.com/azure/active-directory/manage-apps/user-provisioning)
78
+
79
+
---
80
+
81
+
### View the real-time progress of the Azure AD provisioning service
We've updated the Azure AD provisioning experience to include a new progress bar that shows you how far you are in the user provisioning process. This updated experience also provides information about the number of users provisioned during the current cycle, as well as how many users have been provisioned to date.
88
+
89
+
For more information, see [Check the status of user provisioning](https://docs.microsoft.com/azure/active-directory/manage-apps/application-provisioning-when-will-provisioning-finish-specific-user).
90
+
91
+
---
92
+
93
+
### Company branding now appears on sign out and error screens
94
+
95
+
**Type:** Changed feature
96
+
**Service category:** Authentications (Logins)
97
+
**Product capability:** User Authentication
98
+
99
+
We've updated Azure AD so that your company branding now appears on the sign out and error screens, as well as the sign-in page. You don't have to do anything to turn on this feature, Azure AD simply uses the assets you've already set up in the **Company branding** area of the Azure portal.
100
+
101
+
For more information about setting up your company branding, see [Add branding to your organization's Azure Active Directory pages](https://docs.microsoft.com/azure/active-directory/fundamentals/customize-branding).
102
+
103
+
---
104
+
105
+
### Azure Multi-Factor Authentication (MFA) Server is no longer available for new deployments
As of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments. New customers who want to require multi-factor authentication in their organization must now use cloud-based Azure Multi-Factor Authentication. Customers who activated MFA Server prior to July 1 won't see a change. You'll still be able to download the latest version, get future updates, and generate activation credentials.
112
+
113
+
For more information, see [Getting started with the Azure Multi-Factor Authentication Server](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfaserver-deploy). For more information about cloud-based Azure Multi-Factor Authentication, see [Planning a cloud-based Azure Multi-Factor Authentication deployment](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfa-getstarted).
114
+
115
+
---
116
+
117
+
## May 2019
118
+
119
+
### Service change: Future support for only TLS 1.2 protocols on the Application Proxy service
120
+
121
+
**Type:** Plan for change
122
+
**Service category:** App Proxy
123
+
**Product capability:** Access Control
124
+
125
+
To help provide best-in-class encryption for our customers, we're limiting access to only TLS 1.2 protocols on the Application Proxy service. This change is gradually being rolled out to customers who are already only using TLS 1.2 protocols, so you shouldn't see any changes.
126
+
127
+
Deprecation of TLS 1.0 and TLS 1.1 happens on August 31, 2019, but we'll provide additional advanced notice, so you'll have time to prepare for this change. To prepare for this change make sure your client-server and browser-server combinations, including any clients your users use to access apps published through Application Proxy, are updated to use the TLS 1.2 protocol to maintain the connection to the Application Proxy service. For more information, see [Add an on-premises application for remote access through Application Proxy in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/manage-apps/application-proxy-add-on-premises-application#before-you-begin).
128
+
129
+
---
130
+
131
+
### Use the usage and insights report to view your app-related sign-in data
132
+
133
+
**Type:** New feature
134
+
**Service category:** Enterprise Apps
135
+
**Product capability:** Monitoring & Reporting
136
+
137
+
You can now use the usage and insights report, located in the **Enterprise applications** area of the Azure portal, to get an application-centric view of your sign-in data, including info about:
138
+
139
+
- Top used apps for your organization
140
+
141
+
- Apps with the most failed sign-ins
142
+
143
+
- Top sign-in errors for each app
144
+
145
+
For more information about this feature, see [Usage and insights report in the Azure Active Directory portal](https://docs.microsoft.com/azure/active-directory/reports-monitoring/concept-usage-insights-report)
146
+
147
+
---
148
+
149
+
### Automate your user provisioning to cloud apps using Azure AD
150
+
151
+
**Type:** New feature
152
+
**Service category:** Enterprise Apps
153
+
**Product capability:** Monitoring & Reporting
154
+
155
+
Follow these new tutorials to use the Azure AD Provisioning Service to automate the creation, deletion, and updating of user accounts for the following cloud-based apps:
You can also follow this new [Dropbox tutorial](https://docs.microsoft.com/azure/active-directory/saas-apps/dropboxforbusiness-provisioning-tutorial), which provides info about how to provision group objects.
164
+
165
+
For more information about how to better secure your organization through automated user account provisioning, see [Automate user provisioning to SaaS applications with Azure AD](https://docs.microsoft.com/azure/active-directory/manage-apps/user-provisioning).
166
+
167
+
---
168
+
169
+
### Identity secure score is now available in Azure AD (General availability)
You can now monitor and improve your identity security posture by using the identity secure score feature in Azure AD. The identity secure score feature uses a single dashboard to help you:
176
+
177
+
- Objectively measure your identity security posture, based on a score between 1 and 223.
178
+
179
+
- Plan for your identity security improvements
180
+
181
+
- Review the success of your security improvements
182
+
183
+
For more information about the identity security score feature, see [What is the identity secure score in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/fundamentals/identity-secure-score).
184
+
185
+
---
186
+
187
+
### New App registrations experience is now available (General availability)
188
+
189
+
**Type:** New feature
190
+
**Service category:** Authentications (Logins)
191
+
**Product capability:** Developer Experience
192
+
193
+
The new [App registrations](https://aka.ms/appregistrations) experience is now in general availability. This new experience includes all the key features you’re familiar with from the Azure portal and the Application Registration portal and improves upon them through:
194
+
195
+
-**Better app management.** Instead of seeing your apps across different portals, you can now see all your apps in one location.
196
+
197
+
-**Simplified app registration.** From the improved navigation experience to the revamped permission selection experience, it’s now easier to register and manage your apps.
198
+
199
+
-**More detailed information.** You can find more details about your app, including quickstart guides and more.
200
+
201
+
For more information, see [Microsoft identity platform](https://docs.microsoft.com/azure/active-directory/develop/) and the [App registrations experience is now generally available!](https://developer.microsoft.com/identity/blogs/new-app-registrations-experience-is-now-generally-available/) blog announcement.
202
+
203
+
---
204
+
205
+
### New capabilities available in the Risky Users API for Identity Protection
We're pleased to announce that you can now use the Risky Users API to retrieve users' risk history, dismiss risky users, and to confirm users as compromised. This change helps you to more efficiently update the risk status of your users and understand their risk history.
212
+
213
+
For more information, see the [Risky Users API reference documentation](https://docs.microsoft.com/graph/api/resources/riskyuser?view=graph-rest-beta).
214
+
215
+
---
216
+
217
+
### New Federated Apps available in Azure AD app gallery - May 2019
218
+
219
+
**Type:** New feature
220
+
**Service category:** Enterprise Apps
221
+
**Product capability:** 3rd Party Integration
222
+
223
+
In May 2019, we've added these 21 new apps with Federation support to the app gallery:
For more information about the apps, see [SaaS application integration with Azure Active Directory](https://aka.ms/appstutorial). For more information about listing your application in the Azure AD app gallery, see [List your application in the Azure Active Directory application gallery](https://aka.ms/azureadapprequest).
228
+
229
+
---
230
+
231
+
### Improved groups creation and management experiences in the Azure AD portal
232
+
233
+
**Type:** New feature
234
+
**Service category:** Group Management
235
+
**Product capability:** Collaboration
236
+
237
+
We've made improvements to the groups-related experiences in the Azure AD portal. These improvements allow administrators to better manage groups lists, members lists, and to provide additional creation options.
238
+
239
+
Improvements include:
240
+
241
+
- Basic filtering by membership type and group type.
242
+
243
+
- Addition of new columns, such as Source and Email address.
244
+
245
+
- Ability to multi-select groups, members, and owner lists for easy deletion.
246
+
247
+
- Ability to choose an email address and add owners during group creation.
248
+
249
+
For more information, see [Create a basic group and add members using Azure Active Directory](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal).
250
+
251
+
---
252
+
253
+
### Configure a naming policy for Office 365 groups in Azure AD portal (General availability)
254
+
255
+
**Type:** Changed feature
256
+
**Service category:** Group Management
257
+
**Product capability:** Collaboration
258
+
259
+
Administrators can now configure a naming policy for Office 365 groups, using the Azure AD portal. This change helps to enforce consistent naming conventions for Office 365 groups created or edited by users in your organization.
260
+
261
+
You can configure naming policy for Office 365 groups in two different ways:
262
+
263
+
- Define prefixes or suffixes, which are automatically added to a group name.
264
+
265
+
- Upload a customized set of blocked words for your organization, which are not allowed in group names (for example, “CEO, Payroll, HR”).
266
+
267
+
For more information, see [Enforce a Naming Policy for Office 365 groups](https://docs.microsoft.com/azure/active-directory/users-groups-roles/groups-naming-policy).
268
+
269
+
---
270
+
271
+
### Microsoft Graph API endpoints are now available for Azure AD activity logs (General availability)
272
+
273
+
**Type:** Changed feature
274
+
**Service category:** Reporting
275
+
**Product capability:** Monitoring & Reporting
276
+
277
+
We're happy to announce general availability of Microsoft Graph API endpoints support for Azure AD activity logs. With this release, you can now use Version 1.0 of both the Azure AD audit logs, as well as the sign-in logs APIs.
278
+
279
+
For more information, see [Azure AD audit log API overview](https://docs.microsoft.com/graph/api/resources/azure-ad-auditlog-overview?view=graph-rest-1.0).
280
+
281
+
---
282
+
283
+
### Administrators can now use Conditional Access for the combined registration process (Public preview)
Administrators can now create Conditional Access policies for use by the combined registration page. This includes applying policies to allow registration if:
290
+
291
+
- Users are on a trusted network.
292
+
293
+
- Users are a low sign-in risk.
294
+
295
+
- Users are on a managed device.
296
+
297
+
- Users agree to the organization’s terms of use (TOU).
298
+
299
+
For more information about Conditional Access and password reset, you can see the [Conditional Access for the Azure AD combined MFA and password reset registration experience blog post](https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Conditional-access-for-the-Azure-AD-combined-MFA-and-password/ba-p/566348). For more information about Conditional Access policies for the combined registration process, see [Conditional Access policies for combined registration](https://docs.microsoft.com/azure/active-directory/authentication/howto-registration-mfa-sspr-combined#conditional-access-policies-for-combined-registration). For more information about the Azure AD terms of use feature, see [Azure Active Directory terms of use feature](https://docs.microsoft.com/azure/active-directory/conditional-access/terms-of-use).
300
+
301
+
---
302
+
33
303
## April 2019
34
304
35
305
### New Azure AD threat intelligence detection is now available as part of Azure AD Identity Protection
0 commit comments