Entra CBA Certificate Authority (CA) scoping

Entra CBA Certificate Authority (CA) scoping in Microsoft Entra allows tenant administrators to restrict the use of specific certificate authorities (CAs) to defined user groups. This feature enhances the security and manageability of certificate-based authentication (CBA) by ensuring that only authorized users can authenticate using certificates issued by specific CAs. More information at Certificate Authority (CA) scoping

Affected: Microsoft Entra ID, Authentications (Logins)

Related changes

• Microsoft Entra Certificate-based authentication (CBA) support on iOS and CBA as second factor · Certificate
• Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows · Microsoft Entra ID
• Expanded policy storage for passkeys (FIDO2) in Microsoft Entra ID · Microsoft Entra ID
• Entra CBA as third option in system-preferred MFA methods · Microsoft Entra ID
• Issuer Hints for Microsoft Entra CBA · Microsoft Entra ID
• Configurable Token Lifetime Policies · Microsoft Entra ID

View at Microsoft → Copy summary