Microsoft Entra’s June 2025 update introduces Agent ID for AI identity management, enhanced passkey controls, improved Authenticator app backup on iOS, and critical migrations from Azure AD Graph and PowerShell modules. These innovations boost security, usability, and identity modernization. Unique :
What’s New in Microsoft Entra – June 2025
Microsoft Entra just dropped a bunch of updates packed with AI identity controls, security boosts, and smoother user experiences. Let’s dive into the key highlights that tech pros need to know.
Introducing Microsoft Entra Agent ID: AI Gets Its Own Identity
Microsoft Entra Agent ID is a game-changer. It assigns unique IDs to AI agents, letting organizations govern how these bots access data and systems. This means AI agents now follow the same strict identity rules as humans, including authentication, authorization, and lifecycle management.
“By extending Entra’s identity protections to AI agents, organizations can apply Conditional Access policies, enforce least privilege access, and monitor agent activity—just as they would with human users.”
This update ensures AI deployments stay secure and transparent, giving admins full control over AI interactions.
Major Security and Authentication Updates
Passkey Profiles Get Smarter
Starting November 2025, passkey (FIDO2) authentication policies will support group-based controls. Admins can customize which security keys or Microsoft Authenticator passkeys specific user groups use. Plus, Entra will accept any WebAuthn-compliant security key when “Enforce attestation” is off, broadening hardware options.
Risk Policies Moving to Conditional Access
Microsoft is retiring User Risk and Sign-in Risk policies in Entra ID Protection. From July 31, 2025, these pages become read-only, and by October 1, 2026, they’ll be fully retired. Organizations must migrate these policies to Conditional Access to unlock enhanced features.
Improved Backup for Authenticator App on iOS
Starting September 2025, iOS users can back up all Authenticator app account names—including third-party accounts—via iCloud and iCloud Keychain. This replaces the older Microsoft personal account backup method, making device switches effortless.
“When users set up a new iOS device, their account names will automatically appear in the Authenticator app, simplifying restore without needing a Microsoft account.”
Android support will follow, but iOS users get a smoother, more secure backup experience right away.
Important Retirements and Migration Deadlines
Azure AD Graph API Is Phasing Out
Azure AD Graph API started retiring in September 2024, with full shutdown planned for early September 2025. If your apps still rely on it, migrate to Microsoft Graph immediately to avoid outages. Expect some temporary downtime during the transition.
AzureAD PowerShell Modules Retiring
The classic AzureAD and AzureAD-Preview PowerShell modules will stop working by mid-October 2025. Switch to Microsoft Graph PowerShell SDK or Microsoft Entra PowerShell to keep your scripts running smoothly.
Other Noteworthy Changes
- B2B Guest Authentication: From July 2025, guest users will see their home organization’s branded sign-in page, reducing confusion during cross-tenant access.
- Password-Based SSO: The “Automatically capture sign-in fields” feature will be retired by August 2025. Use manual capture with the MyApps Secure Sign-In Extension instead.
Why These Updates Matter
Microsoft Entra’s June 2025 updates focus on securing AI identities, modernizing authentication, and simplifying user management. For tech teams, staying ahead means migrating legacy tools and embracing new policies now.
Don’t wait—start planning your migrations and policy updates to leverage these innovations and keep your environment secure.
From the Microsoft Entra Blog articles
Windows Server Devices Now Recognized as a New OS in Intune Microsoft has announced that Windows Server devices are Read more
Microsoft Power Platform is leading the way in AI-generated low-code app development. With the help of AI, users can quickly Read more
Microsoft Intune is an enterprise mobility management platform that helps organizations manage mobile devices, applications, and data. The October edition Read more
Microsoft Intune has released its November edition, featuring new updates to help IT admins better manage their organization’s mobile devices. Read more
