Modern Workplace - From my point of view

Here are two updates on Entra and security worth keeping on your radar over the summer. Both touch identity in different ways. One tightens how users prove who they are during password resets, and the other quietly adjusts licensing for organizations working with AI agents. Neither are big on its own, but in order to stay up to date and current, admins will have to makes some small changes. SSPR will only accept explicitly registered authentication methods Microsoft has announced a tightening of how Self-Service Password Reset verifies identity in Microsoft Entra ID. Today, SSPR can fall back to contact information stored in directory attributes such as mobile phone, business phone, or alternate email, even when those values were never registered by the user as authentication methods. Going forward, only explicitly registered methods will be accepted. The change is part of Microsoft's Secure Future Initiative and ensures password resets rely on trusted, user-validated methods rathe...