check before: 2025-07-01
Product:
Entra, Microsoft 365 Apps
Platform:
Android, Online, World tenant
Status:
Change type:
Admin impact, Feature update, Retirement, Updated message, User impact
Links:
Details:
Summary:
Microsoft Entra will enable browser access by default for all Android users, retiring the "Enable Browser Access" feature in Microsoft Authenticator and Company Portal apps. This hardware-bound device registration change requires no admin action and will roll out automatically worldwide. Organizations not using Android can ignore this update.
Details:
Updated July 24, 2025: We have updated the timeline. Thank you for your patience.
If your organization does not support Android devices, you can safely ignore this message.
As part of our overall security hardening efforts, we will migrate Microsoft Entra ID device registration to be hardware-bound. Since the device identity will be hardware-bound, we will retire the ability for users to enable a feature called Enable Browser Access (EBA) in the Microsoft Authenticator app and the Microsoft Company Portal app for Android. After this retirement, browser access will automatically be enabled as part of device registration.
[When this will happen:]
General Availability (Worldwide): We will communicate via Message center when we are ready to proceed.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-03-06
updated:
2025-07-25
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
Pictures
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft is updating its Entra service for Android users by automatically enabling browser access during device registration, removing the manual option previously available in the Microsoft Authenticator and Company Portal apps.
Direct effects for Operations**
Loss of Control Over Browser Access
Automatic enabling of browser access may lead to security vulnerabilities if users access sensitive data on unsecured networks.
- roles: IT Security Manager, Compliance Officer
- references: https://techcommunity.microsoft.com/blog/microsoft-entra-blog/whats-new-in-microsoft-entra---september-2024/4253153
User Confusion and Frustration
Users may be unaware of the change, leading to confusion about new access methods and potential disruptions in their workflow.
- roles: End User, Help Desk Support
- references: https://techcommunity.microsoft.com/blog/microsoft-entra-blog/whats-new-in-microsoft-entra---september-2024/4253153
Increased Support Tickets
The change may result in a spike in support requests as users encounter issues or have questions about the new browser access feature.
- roles: Help Desk Support, IT Support Specialist
- references: https://techcommunity.microsoft.com/blog/microsoft-entra-blog/whats-new-in-microsoft-entra---september-2024/4253153
Potential Data Leakage
With browser access enabled by default, there is a risk of data leakage if users inadvertently access corporate resources from personal or insecure devices.
- roles: Data Protection Officer, IT Security Manager
- references: https://techcommunity.microsoft.com/blog/microsoft-entra-blog/whats-new-in-microsoft-entra---september-2024/4253153
Impact on Compliance and Auditing
The automatic change may affect compliance with internal policies or regulations if not properly communicated and managed.
- roles: Compliance Officer, IT Manager
- references: https://techcommunity.microsoft.com/blog/microsoft-entra-blog/whats-new-in-microsoft-entra---september-2024/4253153
Configutation Options**
XXXXXXX ... paid membership only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-07-25 | MC MessageTagNames | Feature update, User impact, Admin impact, Retirement | Updated message, Feature update, User impact, Admin impact, Retirement |
| 2025-07-25 | MC Summary | Browser access will be enabled by default for all Android users in Microsoft Entra starting July 2025. The Enable Browser Access feature will be retired, and no action is required from admins or users. This change is part of security enhancements and will occur automatically. | Microsoft Entra will enable browser access by default for all Android users, retiring the "Enable Browser Access" feature in Microsoft Authenticator and Company Portal apps. This hardware-bound device registration change requires no admin action and will roll out automatically worldwide. Organizations not using Android can ignore this update. |
| 2025-07-25 | MC Last Updated | 03/06/2025 00:58:44 | 2025-07-24T15:40:22Z |
| 2025-07-25 | MC Messages | If your organization does not support Android devices, you can safely ignore this message.
As part of our overall security hardening efforts, we will migrate Microsoft Entra ID device registration to be hardware-bound. Since the device identity will be hardware-bound, we will retire the ability for users to enable a feature called Enable Browser Access (EBA) in the Microsoft Authenticator app and the Microsoft Company Portal app for Android. After this retirement, browser access will automatically be enabled as part of device registration. [When this will happen:] General Availability (Worldwide): This change will start to roll out in July 2025. We will update this message with a more specific timeline closer to July 2025. | Updated July 24, 2025: We have updated the timeline. Thank you for your patience.
If your organization does not support Android devices, you can safely ignore this message. As part of our overall security hardening efforts, we will migrate Microsoft Entra ID device registration to be hardware-bound. Since the device identity will be hardware-bound, we will retire the ability for users to enable a feature called Enable Browser Access (EBA) in the Microsoft Authenticator app and the Microsoft Company Portal app for Android. After this retirement, browser access will automatically be enabled as part of device registration. [When this will happen:] General Availability (Worldwide): We will communicate via Message center when we are ready to proceed. |
| 2025-07-25 | MC Title | Microsoft Entra: Browser access will be enabled by default for all Android users | (Updated) Microsoft Entra: Browser access will be enabled by default for all Android users |
| 2025-07-25 | MC End Time | 11/28/2025 09:00:00 | 2026-02-02T09:00:00Z |
Last updated 5 months ago ago
