Six confirmed Microsoft Entra changes from the week to 31 October 2026, each with who acts, the check and the source. Two have their own briefs; the most urgent is the MemberOf retirement on 3 November.
Microsoft Entra ID retires the MemberOf rule operator on 3 November 2026 (MC1529463). From that day, dynamic groups, dynamic administrative units and entitlement management auto-assignment policies that use MemberOf stop processing changes, so identity admins must replace those rules before then.
From early November 2026, Microsoft Entra self-service password reset (SSPR) only accepts methods a user registered. The mobile number, office phone and alternate email that sit in the directory stop counting. Microsoft says act by 6 November.
Users who only have a password will be able to register a passkey as their first multifactor authentication method in Microsoft Entra ID. Until now they first had to register another MFA method, such as SMS or voice. Users who are enabled for passkeys will be prompted to register one by default.