MC1024404 – M365 Change Digest

One-line summary

Microsoft Entra ID device registration for Android will become hardware-bound, retiring the Enable Browser Access feature in Authenticator and Company Portal apps; change is automatic.

Similar updates

Details

Summary

Microsoft Entra will enable browser access by default for all Android users, retiring the "Enable Browser Access" feature in Microsoft Authenticator and Company Portal apps. This hardware-bound device registration change requires no admin action and will roll out automatically worldwide. Organizations not using Android can ignore this update.

Body (from Message Center)

Updated July 24, 2025: We have updated the timeline. Thank you for your patience.

If your organization does not support Android devices, you can safely ignore this message.

As part of our overall security hardening efforts, we will migrate Microsoft Entra ID device registration to be hardware-bound. Since the device identity will be hardware-bound, we will retire the ability for users to enable a feature called Enable Browser Access (EBA) in the Microsoft Authenticator app and the Microsoft Company Portal app for Android. After this retirement, browser access will automatically be enabled as part of device registration.

[When this will happen:]

General Availability (Worldwide): We will communicate via Message center when we are ready to proceed.

[What you need to do to prepare:]

No action or preparation is required from admins or users regarding this change. The change will occur automatically.

The Enable Browser Access feature will retire from the Company Portal and Authenticator apps for Android:

user controls

This change was first announced in What's new in Microsoft Entra - September 2024 | Microsoft Community Hub (September 2024).

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Review current configuration",
      "Notify users",
      "Update documentation if needed"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Microsoft Entra ID device registration for Android will become hardware-bound, retiring the Enable Browser Access feature in Authenticator and Company Portal apps; change is automatic.",
    "ai_topics": [
      "Entra",
      "Authenticator"
    ],
    "category": "planForChange",
    "details_map": {
      "Summary": "Microsoft Entra will enable browser access by default for all Android users, retiring the \"Enable Browser Access\" feature in Microsoft Authenticator and Company Portal apps. This hardware-bound device registration change requires no admin action and will roll out automatically worldwide. Organizations not using Android can ignore this update."
    },
    "id": "MC1024404",
    "importance": 4,
    "is_major_change": true,
    "last_modified": "2025-07-24T13:40:22Z",
    "ms_products": [
      "Entra"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft Entra"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "Feature update",
      "User impact",
      "Admin impact",
      "Retirement"
    ],
    "title": "(Updated) Microsoft Entra: Browser access will be enabled by default for all Android users"
  }
}