Microsoft 365 Roadmap · July 6, 2026

Microsoft Entra: Upcoming changes to federatedTokenValidationPolicy default settings

Microsoft EntraIn developmentMicrosoft 365 Roadmap

The federatedTokenValidationPolicy is a resource type in Microsoft Graph (beta) that governs the validation of federated authentication tokens and allows customers to configure a rule to block logins where internalDomainFederation does not match UPN domain. The feature by default requires manual configuration in the tenant to prohibit cross-domain logins. To strengthen security with cross-domain sign-in we will change the default rule for federatedTokenValidationPolicy to block logins where internalDomainFederation does not match UPN domain. This internalDomainFederation object is typically created automatically during federation setup with AD federation server or other IdPs.

Open in the full player View on the Microsoft 365 Roadmap ↗ Product documentation ↗

Brief published .