Feature overview
Admins or app owners can now safely pause an app’s access to Entra protected resources without deleting it or disrupting configuration. When deactivated, the app and its service principals globally (across tenants) can’t request new tokens and user sign ins are blocked, while existing tokens simply expire on their normal schedule. This makes it easy for admins to temporarily freeze suspicious or unused apps during investigations, bulk cleanup, or tenant hygiene work. This capability is now available in the Entra admin center (App registrations, Enterprise apps) and Microsoft Graph API.
More info: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/deactivate-application-portal
More info: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/deactivate-application-portal
Expected release date
February CY2026
Preview date: November CY2025
Preview date: November CY2025