New-EntraBetaFeatureRolloutPolicy

New-EntraBetaFeatureRolloutPolicy

    -Feature <FeatureEnum>
    -IsEnabled <Boolean>
    [-Description <String>]
    [-IsAppliedToOrganization <Boolean>]
    [-AppliesTo <System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.MsDirectoryObject]>]
    -DisplayName <String>
    [<CommonParameters>]

The New-EntraBetaFeatureRolloutPolicy cmdlet allows an admin to create the policy for cloud authentication roll-out (users moving from federation to cloud auth) in Microsoft Entra ID.

The policy admin can identify whether the users authenticate using password hashes in Microsoft Entra ID (Password hash-sync) or Microsoft Entra ID on-premises directly (Pass-through authentication).

Connect-Entra -Scopes 'Directory.ReadWrite.All'
New-EntraBetaFeatureRolloutPolicy -Feature 'PassthroughAuthentication' -DisplayName 'Passthrough Authentication Rollout Policy' -IsEnabled $false

Id                                   Description DisplayName                               Feature                   IsAppliedToOrganization IsEnabled
--                                   ----------- -----------                               -------                   ----------------------- ---------
00aa00aa-bb11-cc22-dd33-44ee44ee44ee            Passthrough Authentication Rollout Policy passthroughAuthentication False                   False

This example creates the policy for cloud authentication roll-out in Microsoft Entra ID.

• -Feature specifies a feature assigned to the cloud authentication roll-out policy. Currently, you can assign PassthroughAuthentication | SeamlessSso | PasswordHashSync | EmailAsAlternateId.
• -DisplayName specifies the display name of the cloud authentication roll-out policy.
• -IsEnabled specifies the status of cloud authentication roll-out policy.

Connect-Entra -Scopes 'Directory.ReadWrite.All'
New-EntraBetaFeatureRolloutPolicy -Feature 'PassthroughAuthentication' -DisplayName 'FeatureRolloutPolicy' -IsEnabled $false -IsAppliedToOrganization $false

Id                                   Description DisplayName          Feature                   IsAppliedToOrganization IsEnabled
--                                   ----------- -----------          -------                   ----------------------- ---------
00aa00aa-bb11-cc22-dd33-44ee44ee44ee           FeatureRolloutPolicy passthroughAuthentication False                   False

This command creates the policy for cloud authentication roll-out in Microsoft Entra ID.

• -Feature specifies a feature assigned to the cloud authentication roll-out policy. Currently, you can assign PassthroughAuthentication | SeamlessSso | PasswordHashSync | EmailAsAlternateId.
• -DisplayName specifies the display name of the cloud authentication roll-out policy.
• -IsEnabled specifies the status of cloud authentication roll-out policy.
• -IsAppliedToOrganization specifies if the cloud authentication roll-out policy applied to the entire organization.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

See more details - Feature rollout policy