Microsoft Entra Adds Identity Governance, Cloud Sync, and Access Management Updates

Microsoft has highlighted a range of new and preview capabilities rolled out to Microsoft Entra customers in August 2026. The latest updates strengthen identity management, automate governance tasks, improve hybrid identity scenarios, and give IT admins greater control over user access.

Administrators can now use a supported registry setting to automatically approve single sign-on (SSO) permissions on managed Windows devices. This new admin control allows users to access Microsoft services with fewer authentication prompts. It’s available for PCs running the July 2026 monthly security update for Windows 11 version 24H2 and 25H2.

Microsoft has introduced a new writeback feature that allows administrators to synchronize key attribute changes from Exchange Online back to on-premises Active Directory through Entra Cloud Sync.

Lifecycle workflows enhancements

The new What-if mode allows IT admins to test workflows before deployment in enterprise environments. Moreover, they can cancel queued or in-progress workflow executions if errors or configuration issues are detected. Administrators can now automatically set or clear user attributes when lifecycle events occur. This feature supports various attributes, including built-in user attributes and on-premises extension attributes for cloud-managed users, as well as directory extension attributes for cloud-managed users and users synchronized from on-premises Active Directory.

Microsoft has introduced support for a new attribute format and expanded set of dynamic attributes, such as custom security attributes, additional built-in user attributes, directory extensions, and on-premises extension attributes. Microsoft Entra ID has also added support for federation with external identity providers that don’t share users’ email addresses.

Device synchronization with Entra Cloud Sync

Administrators can synchronize on-premises Active Directory devices with Microsoft Entra ID using Cloud Sync. This capability supports hybrid device management and reduces dependence on traditional synchronization tools. This update also allows IT admins to create workflows that identify and remove guest users who no longer have sponsors. It helps to reduce security risks and maintain cleaner environments.

Last but not least, Microsoft Entra Domain Services now offers backup and restore capabilities for Group Policy Objects (GPOs). This feature allows administrators to recover policy settings after accidental changes.