Microsoft Entra updates at RSAC
Microsoft announced new Entra identity and network security features at RSAC 2026 that add continuous verification and tighter policy automation. The enhancements aim to automate onboarding/offboarding and tie access decisions to device health and location — features that will cascade into education admin tools over time. (techcommunity.microsoft.com)
Microsoft’s Entra blog at RSAC says 97% of organizations saw an identity or network access incident in the past year, and 70% of those incidents were tied to AI-related activity. (techcommunity.microsoft.com) Microsoft announced a new Microsoft Entra Agent ID to apply identity governance and Conditional Access controls to AI agents, treating agent identities with the same protections as users, apps, and devices. (techcommunity.microsoft.com) The RSAC post lists new Conditional Access “agent” capabilities that include context-aware recommendations, phased rollouts for policies, and automated least‑privilege enforcement to remediate risky access. (techcommunity.microsoft.com) Microsoft informed admins that passkey profiles and synced passkeys reach general availability starting March 2026 and that tenants not opted in will be migrated to a Default passkey profile with Microsoft‑managed registration campaigns prompting users after MFA. (mc.merill.net) A separate Entra advisory says a Conditional Access enforcement change begins March 27, 2026 — policies targeting “All resources” with exclusions will be evaluated for sign‑ins that request only OIDC or limited directory scopes, with a phased rollout through June 2026 that can cause CLI and custom app sign‑ins to receive MFA or device‑compliance challenges. (techcommunity.microsoft.com) Microsoft’s education guidance confirms Entra ID is the identity foundation for Microsoft Education offerings, meaning tenant‑wide Entra changes such as passkey profile migration and Conditional Access enforcement apply to education tenants and admin tooling used by schools. (learn.microsoft.com) Microsoft has begun shipping phishing‑resistant passkey sign‑in support for Windows via Windows Hello, aligning platform sign‑in options with the passkey profile rollout announced for Entra tenants. (bleepingcomputer.com)
