Microsoft Entra: App Deactivation Beta
Data as of 2 hours ago (9 September 2026)
Description
Admins or app owners can now safely pause an app’s access to Entra protected resources without deleting it or disrupting configuration. When deactivated, the app and its service principals globally (across tenants) can’t request new tokens and user sign ins are blocked, while existing tokens simply expire on their normal schedule. This makes it easy for admins to temporarily freeze suspicious or unused apps during investigations, bulk cleanup, or tenant hygiene work. This capability is now available in the Entra admin center (App registrations, Enterprise apps) and Microsoft Graph API.
Change history
Added to the roadmap 13 January 2026. Tracked here since 1 September 2026. Earliest target we recorded: February 2026 (since tracked — Microsoft may have moved it before we started watching).
- 2 September 2026 Description description updated