Skip to main content

M365 Roundup, June 2022: Temporary Access Pass Goes GA and Legacy CSP Gets a Stay of Execution

Nick Ross5 min read

TL;DR

  • Temporary Access Pass reached general availability in June 2022, giving admins a secure way to register passwordless and phishing-resistant methods like FIDO2 and recover users who lost their strong authentication methods.
  • Microsoft reversed course on blocking legacy CSP auto-renewals from July 11, 2022, but new legacy orders remain blocked and legacy incentive rebates still end January 1, 2023.
  • Azure AD memberOf dynamic groups, in preview as of June 2022, return a flat member list, so unlike classic nested groups they work for licensing and application assignment.
  • Every Teams meeting now carries an auto-assigned Meeting ID and passcode, giving attendees a join path that does not depend on the meeting link.
  • The one-time passcode emails for SharePoint and OneDrive external sharing move from no-reply@sharepointonline.com to no-reply@notify.microsoft.com, which mail filtering rules may need to account for.

June 2022 buried its two most consequential items at the bottom of the announcement pile: Temporary Access Pass went GA, which quietly fixes the worst part of passwordless onboarding, and Microsoft blinked on the July 11 legacy CSP renewal cutoff. Teams shipped seven features on top. Identity and licensing first, then the feature tour.

Microsoft 365 admin logo

Identity and admin: the items that change your runbooks

Temporary Access Pass reaches general availability (new feature)

Temporary Access Pass (TAP) is now generally available. TAP gives users a time-limited credential for securely registering passwordless methods such as Phone Sign-in, phishing-resistant methods such as FIDO2, and can assist in Windows onboarding (Azure AD Join and Windows Hello for Business). It also simplifies recovery: when a user loses or forgets their strong authentication methods, TAP lets them sign in to register new ones.

More info: Configure a Temporary Access Pass in Azure AD (opens in new tab)

Rollout: generally available.

Nested membership arrives for Azure AD dynamic groups (preview)

You can now build dynamic Azure AD security groups and Microsoft 365 groups based on other groups, for example a Dynamic-Group-A containing the members of Group-X and Group-Y. The source groups can be any group type represented in Azure AD: user or device security groups, Microsoft 365 groups, and groups synced from on-premises.

The part that matters operationally: unlike existing nested security groups, memberOf dynamic groups return a flat list of members, so they work for licensing assignment and application assignment.

Rollout: public preview.

Legacy CSP renewals live past July 11 after all (licensing)

Microsoft has seen partners accelerating migrations of legacy Cloud Solution Provider (CSP) subscriptions to the new commerce platform, and all CSP partners are still encouraged to finish migrating before end of term. But the previously communicated plan to stop auto-renewing legacy commercial seat-based subscriptions on July 11, 2022 has been walked back: Microsoft made a business decision to continue supporting legacy auto-renewal beyond that date.

What is not changing:

  • The block on new orders of legacy CSP subscriptions, in place since March 10, 2022
  • The January 1, 2023 termination of monthly incentive rebates paid on active legacy CSP commercial seat-based subscriptions

Partner Center announcement: June 2022 announcements (opens in new tab)

Microsoft Teams logo

Teams: seven features, including a chat with yourself

Meeting chat bubbles on iOS and Android (new feature)

Meeting messages now surface as chat bubbles on mobile. Users can snooze them for the current meeting via the snooze icon, or turn them off permanently with Don't show chat bubbles in the overflow (...) menu.

Chat bubbles during a Teams meeting on mobile

Rollout: mid-June, completing by late June.

Chat with self (new feature)

Users can now message themselves the same way they message anyone else: type your own name in the To field of a new chat, or start from your people card. The old workarounds, starting a meeting with yourself for the meeting chat, or being the last one left in a group chat, keep working, but they are distinct from a true self chat.

Rollout: mid-June, completing by late June.

Join by Meeting ID and passcode (new feature)

All meetings now carry a Meeting ID and passcode, automatically assigned and added to the invite under the meeting link. Attendees can join by entering the Meeting ID, with pre-join, lobby, and security behavior unchanged. In Outlook, the Meeting ID and passcode sit in the meeting details section of the invite; enter them in the Teams app or on the website to join.

Meeting ID and passcode in the meeting invite
Joining a Teams meeting by ID and passcode

Rollout: early July, completing by mid-July.

Viva Topics mentions in Teams messages (new feature)

Organizations with Viva Topics licenses get topic mentions in Teams: type the # character and pick from the topic picker, which narrows as you type.

Topic picker triggered by the hash character in Teams

Recipients with Viva Topics licenses see the topic name as highlighted text and can hover for the topic card: alternate names, descriptions, associated people, and resources.

Topic card shown on hover in a Teams message

Rollout: late June, completing by late July.

E-signature approval requests from mobile (new feature)

Users can now create e-signature approvals on mobile devices. This requires integration with Adobe Sign or DocuSign. Tutorial: Create an e-sign approval request (opens in new tab)

Rollout: mobile support begins in June, list and action e-signature approval requests roll out mid-July, completing by mid-August.

The Updates app: check-ins and reports in the flow of work (new feature)

Updates in Teams is an out-of-the-box app for creating, submitting, and reviewing updates, check-ins, and reports in one place. It covers recurring processes, like a weekly update, store opening, or facility inspection, and in-the-moment needs, like a shift handoff, maintenance request, or incident report. Templates in the app give teams a starting point they can configure for their own processes.

Video intro: Get started in Updates (opens in new tab)

The Updates app in Microsoft Teams

Rollout: generally available.

Speaker Coach in meetings (new feature)

Speaker Coach provides private, personalized feedback on speaking and presentation skills, both in real time and in a post-meeting summary. Tenant admins should ensure the speaker coach policy (opens in new tab) is enabled so users can turn it on for themselves.

Speaker Coach feedback during a Teams meeting

More information: PowerPoint's presenter coach expands to Microsoft Teams (opens in new tab)

Rollout: early July, completing by late July.

Microsoft Exchange logo

Outlook mobile: the Microsoft Feed lands on the search page

The feed in Outlook Mobile consolidates information from across Microsoft products and services into one destination. A new feed on the Search page intermingles new and existing content, ranked by what is currently the most important insight for the user; the ranking is personal and adapts to each user's usage patterns and preferred content types.

Microsoft Feed on the Outlook mobile search page

Admins can turn the Microsoft Feed on or off through the existing Discover feature in MDM, deploying app settings to devices in the tenant. Details in the Outlook for iOS and Android configuration documentation (opens in new tab).

Rollout: mid-June, completing by early August.

Microsoft SharePoint logo

SharePoint and OneDrive: a migration tool and a sender change

Assessment tool for SharePoint 2013 workflows (new feature)

The new open-source Microsoft 365 Assessment Tool (opens in new tab) identifies and evaluates SharePoint 2013 workflows in your tenant, providing usage data and generating a Power BI report to plan migration of those 2013 workflows to a modern workflow orchestration service.

Rollout: available beginning early June.

External sharing one-time passcode emails change sender (new feature)

To improve delivery reliability of the one-time passcode emails sent during the external sharing flow in OneDrive and SharePoint, the sending address moves from no-reply@sharepointonline.com to no-reply@notify.microsoft.com. No other OneDrive or SharePoint emails change at this time. If customer transport rules or allow-lists key on the old sender, update them.

Rollout: late July, completing by late September.

Frequently asked questions

What changed about the July 11, 2022 legacy CSP renewal block?

Microsoft decided to keep supporting legacy auto-renewal beyond July 11, 2022 rather than forcing migrations at end of term. The March 10, 2022 block on new legacy CSP orders stands, and monthly incentive rebates on active legacy commercial seat-based subscriptions still terminate January 1, 2023.

What makes memberOf dynamic groups different from existing nested security groups?

They return a flat list of members rather than a nested structure, which means they can drive licensing assignment and application assignment. Membership can be built from any Azure AD group type, including synced on-premises groups.

What do admins need to do for Speaker Coach in Teams meetings?

Ensure the speaker coach meeting policy is enabled. Once it is, users can turn on Speaker Coach for themselves in meetings and receive private real-time and post-meeting feedback.

GA announcements do not configure themselves

Temporary Access Pass only helps the tenants where someone sets it up, and the same goes for every control Microsoft ships. CloudCapsule shows you which of 250+ controls each tenant is missing, in about 60 seconds.

Run a free scan
Nick Ross

Written by

Nick Ross

CEO · Microsoft MVP · Founder, T-Minus 365

Nick is not just a CEO, he's a respected thought leader and influencer in the MSP space. Tens of thousands of MSPs learn through his YouTube channel, T-Minus365. Nick has been honored as a three-time Microsoft MVP for his educational content; his expertise and influence are the backbone of our mission, ensuring that you are in the best hands when it comes to security.

Nick joined Pax8 in 2017, where he would ultimately oversee product management for PSA and Microsoft integrations. Following his tenure at Pax8, Nick has continued to demonstrate his leadership prowess as an executive at various MSPs, culminating in his most recent role at Sourcepass.

Nick holds a Bachelor's Degree in Business Management from Florida State University, as well as a Minor Degree in Entrepreneurship. In his free time, Nick is an avid hiker, reader, and fitness-junkie.

Keep reading