check before: 2026-07-06
Product:
Entra, Microsoft 365 admin center, Microsoft 365 Apps, Windows
Platform:
Online, World tenant
Status:
Change type:
New feature, User impact, Admin impact
Links:
Details:
Summary:
Conditional Access policies will apply to Windows Hello for Business and macOS Platform SSO registration starting July 6, 2026, enforcing policy requirements like MFA and trusted locations during enrollment. Organizations should review and test policies, update documentation, and ensure users can meet requirements before rollout completes July 13, 2026.
Details:
If your organization has Conditional Access policies scoped to Register security information, those policies will now apply when users set up Windows Hello for Business (WHfB) or register macOS Platform SSO credentials.
Today, these registration flows enforce MFA, but do not evaluate your registration-targeting Conditional Access policies - meaning requirements like authentication strength, trusted locations, or other CA conditions aren't enforced when users enroll WHfB or macOS Platform SSO credentials. This change closes that gap.
Organizations without these policies aren't affected.
When this will happen
* July 6, 2026: Gradual rollout begins.
* July 13, 2026: Rollout complete for all tenants.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2026-05-30
updated:
2026-05-30
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
User Registration Blockage
Users attempting to register Windows Hello for Business or macOS Platform SSO credentials may be blocked if they do not meet Conditional Access policy requirements, leading to delays in device setup and access to services.
- roles: End Users, IT Support
- references: https://learn.microsoft.com/entra/identity/conditional-access/policy-all-users-security-info-registration
Increased Support Requests
The introduction of new authentication prompts during device setup may lead to an increase in support requests as users encounter issues meeting the new Conditional Access requirements.
- roles: IT Support, Helpdesk Staff
- references: https://learn.microsoft.com/entra/identity/conditional-access/policy-all-users-security-info-registration
Documentation Updates Required
Organizations will need to update their helpdesk documentation to reflect the new requirements for device registration, which may lead to confusion if not communicated effectively.
- roles: IT Support, Documentation Team
- references: https://learn.microsoft.com/entra/identity/conditional-access/policy-all-users-security-info-registration
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
XXXXXXX ... free basic plan only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 1 week ago ago
