← Back
External authentication methods (EAM) – Public preview update
MC1192252 · build prod-20251231-200323
Category
planForChange
Severity
normal
Major change
False
Last modified
2025-12-12 22:25:29
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
Services
Microsoft Entra
Tags
Feature update, User impact, Admin impact
Master tags
Security
Roadmap IDs

One-line summary

Registration enforcement for External Authentication Methods (EAM) in Public Preview starts Dec 8, 2025; new users must register an external method during sign-in.

Similar updates

More like this
MC1097225 (Updated) Entra ID: Upcoming changes to support passkey profiles in the authentication methods policy (preview)
(Updated) Entra ID: Upcoming changes to support passkey profiles in the authentication methods policy (preview) Entra ID expands passkey policy in November 2025 public preview, enabling group-based passkey controls, new API schema, and broader attestation support for FIDO2/passkey providers. ...on methods policy in Microsoft Entra ID to support.
MC1102784 Microsoft Teams on the web: New Private Preview for Sign in with Apple and Google for consumers may affect enterprise
Microsoft Teams on the web: New Private Preview for Sign in with Apple and Google for consumers may affect enterprise The new Apple and Google sign-in options for Teams web are on hold; existing sign-in methods remain unchanged and no admin action is needed. Updated November 24, 2025: This change is currently on hold. ...r organization's sign-in.
MC1088732 Microsoft Teams: Important updates for Android-based Teams devices – Authentication changes coming soon
Microsoft Teams: Important updates for Android-based Teams devices – Authentication changes coming soon Teams Android devices must update to specified app versions for modern Entra ID authentication by Dec 31, 2025, or risk service disruption; enhanced security features will be enabled. To enhance security capabilities such as Continuous Access.
MC1103608 Microsoft Entra ID: Change in guest authentication experience for B2B collaboration
Microsoft Entra ID: Change in guest authentication experience for B2B collaboration Starting July 2025, guest users signing in via Entra ID B2B will use their home organization's sign-in page, improving clarity and reducing confusion during cross-tenant authentication. ...es to tenants that use B2B (business-to-business) collaborationWe will.
MC1180712 Microsoft Copilot Studio - Strengthen security of Copilot Studio agents with additional threat protection
Microsoft Copilot Studio - Strengthen security of Copilot Studio agents with additional threat protection Copilot Studio agents gain enhanced security with external threat detection, available December 10, 2025; admins can integrate Microsoft Defender or other providers via Entra and Power Platform. Update: Release of this feature has been.
MC1024404 (Updated) Microsoft Entra: Browser access will be enabled by default for all Android users
(Updated) Microsoft Entra: Browser access will be enabled by default for all Android users Microsoft Entra ID device registration for Android will become hardware-bound, retiring the Enable Browser Access feature in Authenticator and Company Portal apps; change is automatic. Updated July 24, 2025: We have updated the timeline. ...er Access .

Details

Summary
External Authentication Methods (EAM) Public Preview will enforce registration starting December 8, 2025. Existing users are pre-registered; new users after December 2, 2025, must complete in-line setup. Admins can register users. Organizations should prepare by communicating changes and reviewing configurations.

Body (from Message Center)

Introduction

We’re updating the Public Preview of External Authentication Methods (EAM) to improve security, strengthen configuration validation, and prepare for General Availability planned for the end of March 2026. Tenants currently using EAM in Public Preview should review the changes below.

[When this will happen]

Registration enforcement begins December 8, 2025.

[How this affects your organization]

Who is affected: Tenants currently using External Authentication Methods (EAM) in Public Preview.

What will happen:

  • Registration enforcement: Users must have an external authentication method registered to use EAM.
  • In-line registration for new users:
    • Existing users have been registered by Microsoft – which means there’s no action required.
    • New users (any user joining your tenant after December 2, 2025) will be prompted during sign-in to complete in-line setup with your external provider.
    • IT admins can register users on their behalf if needed.

[What you can do to prepare]

  • Communicate to users that starting December 8, 2025, they may be prompted to configure an external method during sign-in if they don’t already have one.
  • Review your external authentication method configurations to ensure they meet validation requirements.
  • Update internal documentation, training materials, and helpdesk guidance.

Learn more:

Microsoft Entra multifactor authentication external method provider reference (Preview)

Manage an external authentication method in Microsoft Entra ID (Preview)

[Compliance considerations]

No compliance considerations identified, review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Communicate registration changes to users",
      "Review and update EAM configurations",
      "Update documentation and training"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Registration enforcement for External Authentication Methods (EAM) in Public Preview starts Dec 8, 2025; new users must register an external method during sign-in.",
    "ai_topics": [
      "Entra"
    ],
    "category": "planForChange",
    "details_map": {
      "Summary": "External Authentication Methods (EAM) Public Preview will enforce registration starting December 8, 2025. Existing users are pre-registered; new users after December 2, 2025, must complete in-line setup. Admins can register users. Organizations should prepare by communicating changes and reviewing configurations."
    },
    "id": "MC1192252",
    "importance": 2,
    "is_major_change": false,
    "last_modified": "2025-12-12T22:25:29Z",
    "ms_products": [
      "Entra"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft Entra"
    ],
    "severity": "normal",
    "tags": [
      "Feature update",
      "User impact",
      "Admin impact"
    ],
    "title": "External authentication methods (EAM) \u2013 Public preview update"
  }
}