You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/fundamentals/whats-new.md
+7-8Lines changed: 7 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,6 +34,7 @@ Azure AD receives improvements on an ongoing basis. To stay up to date with the
34
34
This page is updated monthly, so revisit it regularly. If you're looking for items that are older than six months, you can find them in the [Archive for What's new in Azure Active Directory](whats-new-archive.md).
35
35
36
36
---
37
+
37
38
## March 2020
38
39
39
40
### Users with the default access role will be in scope for provisioning
@@ -66,13 +67,13 @@ The [emails](https://docs.microsoft.com/azure/active-directory/b2b/invitation-em
66
67
67
68
---
68
69
69
-
### Custom role creation for Azure RBAC, now in the Azure portal
70
+
### HomeRealmDiscovery policy changes will appear in the audit logs
70
71
71
-
**Type:**New feature
72
-
**Service category:**RBAC
73
-
**Product capability:**Access Control
72
+
**Type:**Fixed
73
+
**Service category:**Audit
74
+
**Product capability:**Monitoring & Reporting
74
75
75
-
We are happy to announce that you can now create, edit, or delete a custom role without ever leaving the Azure portal! In the past, this capability was only available through command line tools or the Azure Resource Manager API. For more information, see the [new portal-based documentation](https://docs.microsoft.com/azure/role-based-access-control/custom-roles-portal).
76
+
We fixed a bug where changes to the [HomeRealmDiscovery policy](https://docs.microsoft.com/azure/active-directory/manage-apps/configure-authentication-for-federated-users-portal) were not included in the audit logs. You will now be able to see when and how the policy was changed, and by whom.
76
77
77
78
---
78
79
@@ -151,7 +152,6 @@ Starting now, customers who have free tenants can access the [Azure AD sign-in l
151
152
> [!NOTE]
152
153
> Customers still need a premium license (Azure Active Directory Premium P1 or P2) to access the sign-in logs through Microsoft Graph API and Azure Monitor.
153
154
154
-
155
155
---
156
156
157
157
### Deprecation of Directory-wide groups option from Groups General Settings on Azure portal
@@ -198,7 +198,7 @@ The following improvement actions will be added:
198
198
- Require MFA for administrative roles
199
199
200
200
These new improvement actions will require registering your users or admins for MFA across your directory and establishing the right set of policies that fit your organizational needs. The main goal is to have flexibility while ensuring all your users and admins can authenticate with multiple factors or risk-based identity verification prompts. This can take the form of setting security defaults that let Microsoft decide when to challenge users for MFA, or having multiple policies that apply scoped decisions. As part of these improvement action updates, Baseline protection policies will no longer be included in scoring calculations. [Read more about what's coming in Microsoft Secure Score](https://docs.microsoft.com/microsoft-365/security/mtp/microsoft-secure-score-whats-coming?view=o365-worldwide).
201
-
201
+
202
202
---
203
203
204
204
### Azure AD Domain Services SKU selection
@@ -211,7 +211,6 @@ We've heard feedback that Azure AD Domain Services customers want more flexibili
211
211
212
212
**No immediate customer action is required.** For existing customers, the dynamic tier that was in use on February 1, 2020, determines the new default tier. There is no pricing or performance impact as the result of this change. Going forward, Azure AD DS customers will need to evaluate performance requirements as their directory size and workload characteristics change. Switching between service tiers will continue to be a no-downtime operation, and we will no longer automatically move customers to new tiers based on the growth of their directory. Furthermore, there will be no price increases, and new pricing will align with our current billing model. For more information, see the [Azure AD DS SKUs documentation](https://docs.microsoft.com/azure/active-directory-domain-services/administration-concepts#azure-ad-ds-skus) and the [Azure AD Domain Services pricing page](https://azure.microsoft.com/pricing/details/active-directory-ds/).
213
213
214
-
215
214
---
216
215
217
216
### New Federated Apps available in Azure AD App gallery - February 2020
0 commit comments