Microsoft Entra Identity Platform
A developer platform that helps protect your users and data.
Latest posts
General Availability: Refresh Token (RT) Transfer to Apple Watch in Microsoft Entra External ID Native Authentication
We’re excited to announce the General Availability (GA) of Single Sign-On (SSO) from Native Apps to Embedded Web Views for Microsoft Entra External ID (EEID) Native Authentication. This release marks a major milestone in delivering end-to-end seamless authentication experiences for modern CIAM applications bridging the gap between native and web-based app surfaces. Why RT transfer matters for Native Auth Native Authentication enables developers to build fully in‑app, customizable sign-in experiences with secure token management. However, modern applications increasingly extend beyond a single device. Real-...
General Availability: Single Sign-On (SSO) from Native Apps to Embedded Web Views in Microsoft Entra External ID Native Authentication
We’re excited to announce the General Availability (GA) of Single Sign-On (SSO) from Native Apps to Embedded Web Views for Microsoft Entra External ID (EEID) Native Authentication. This release marks a major milestone in delivering end-to-end seamless authentication experiences for modern CIAM applications bridging the gap between native and web-based app surfaces. Why SSO matters for Native Auth Native Authentication gives developers full control over the identity UX—enabling pixel-perfect, in-app sign-in and sign-up experiences without browser redirects. However, real-world applications rarely stay fully ...
General Availability: Social Identity Providers for Native Authentication via Browser‑Delegated Flows (web-view) in Microsoft Entra External ID
We’re excited to announce the General Availability of Social Identity Provider (IdP) support for Native Authentication in Microsoft Entra External ID. This release enables developers to integrate popular social sign‑in options such as Google, Facebook, and Apple — into native and single‑page applications that use Native Authentication. Importantly, social identity providers are supported through a browser‑delegated (web‑view) authentication flow. This approach ensures compatibility with social providers while maintaining the security posture expected of enterprise‑grade identity systems. Clarifying native vs. ...
Designing for Eventual Consistency for Microsoft Entra
Microsoft Entra is a globally distributed service that provides identity and access management to millions of customers world-wide. To scale reliably and remain resilient during failures, Microsoft Entra uses an eventually consistent directory model. Key takeaway A successful write to Microsoft Entra does not guarantee that an immediate read will reflect that change. This article explains how eventual consistency appears in Microsoft Entra, why it exists, and the concrete patterns you should use when building applications that create, update, or manage directory objects. Eventual consistency applies regardless ...
General Availability: Email and SMS OTP as Second‑Factor MFA for Native Authentication in Entra External ID
Today we’re announcing the general availability of Email and SMS one‑time passcode (OTP) as second‑factor MFA for Native Authentication in Microsoft Entra External ID. This enables developers to add step‑up security to native sign‑in and sign‑up flows while keeping users fully inside their applications. This release focuses exclusively on MFA as a second factor, evaluated after first‑factor authentication completes, and is enforced through Microsoft Entra Conditional Access. Clarifying first factor vs. second factor Native Authentication in Entra External ID supports distinct authentication stages, allowing ...
