Live tracker for Microsoft Entra ID retirements, breaking changes, preview features, and what's-new updates. Auto-updated every 4 hours from official Microsoft sources.
Author: Antonio Russo · aboutcloud.io
Live: entratracker.aboutcloud.io | tracker.aboutcloud.io
API: https://api.aboutcloud.io/entra-tracker
A fully automated, €0/month change tracker that monitors five official Microsoft sources for Entra ID updates -- what's new, previews, retirements, and breaking changes. Every update is classified by type, service category, and impact, then served through a searchable, filterable web UI.
This repository is continuously scanned by Trivy on every push and daily at midnight UTC. The badge above is live — it updates automatically via GitHub Actions after each scan.
📊 Latest Trivy Report (click to expand)
Full results available in the Actions tab.
| Scanner | Status |
|---|---|
| Secrets | Scanned on every push |
| Misconfigurations | Scanned on every push |
| Vulnerabilities | Scanned on every push |
| Property | Value |
|---|---|
| Handlers | fetch, scheduled |
| Compatibility date | 2026-03-31 |
Bindings:
| Name | Type | Details |
|---|---|---|
ENTRA_CACHE |
KV Namespace | Single-key cache of parsed articles + metadata |
Cron Trigger: Every 4 hours -- scrapes all 5 sources in parallel and refreshes KV.
CI Deploy: .github/workflows/deploy-worker.yml runs wrangler deploy automatically
on every push to main that touches api/**. Requires two repo secrets set in
GitHub Settings > Secrets and variables > Actions:
CLOUDFLARE_API_TOKEN (Workers Scripts:Edit permission) and CLOUDFLARE_ACCOUNT_ID.
| Property | Value |
|---|---|
| Deployment type | Git-based (branch: main) |
| Tech | Static HTML + inline CSS/JS |
Key: entra_tracker_v3 — single-key storage containing all parsed articles and metadata.
Base URL: https://api.aboutcloud.io/entra-tracker
Returns full article catalog with metadata.
Query parameters:
| Parameter | Values | Description |
|---|---|---|
format |
csv |
Return dataset as CSV instead of JSON. Reuses cached data — does not trigger a re-fetch. Columns: title,category,impact,status,announcedDate,firstSeen,deadline,daysRemaining,namespace,link. Response includes Content-Disposition: attachment; filename="entra-tracker.csv". |
format |
rss |
Return top 50 items as RSS 2.0 feed, newest-first by firstSeen. Reuses cached data. Content-Type: application/rss+xml. Respects namespace filter. |
namespace |
external-id |
Filter items to External ID namespace only. Works with JSON, CSV, and RSS formats. |
refresh |
1 |
Bypass KV cache and force a fresh fetch from all sources. |
announcedDate field: Each item now includes announcedDate (ISO yyyy-mm-dd or null). Populated from the ## Month YYYY section header in whats-new.md / docs changelogs, the commit date in the commits source, or the RSS pubDate. This is the publication/announcement date only — it never becomes a deadline.
All sources are Microsoft-official (MicrosoftDocs GitHub repos + learn.microsoft.com).
| # | Source | Type | Description |
|---|---|---|---|
| 1 | entra-docs: fundamentals/whats-new.md |
Markdown | Core Entra ID + B2C/External ID what's-new (primary source) |
| 2 | learn.microsoft.com: FSLogix release notes |
HTML | Azure Files / Entra Kerberos breaking-change callouts (is-warning/is-important alerts + "action required" notices) |
| 3 | entra-docs: external-id/whats-new-docs.md |
Markdown | External ID docs changelog (- [Title](url) bullets) |
| 4 | azure-docs: active-directory-b2c/whats-new-docs.md |
Markdown | B2C docs changelog (B2C is end-of-sale; winding down) |
| 5 | entra-docs: commits — external-id/customers |
GitHub Commits API | External ID customer how-tos (direct repo watch, pre-changelog) — catches passkey/FIDO2 guides before MS adds them to the curated index |
| 6 | developer.microsoft.com: Graph changelog |
RSS | Microsoft Graph API resource/endpoint deprecations (e.g. the PIM iteration 2 API retirement). The feed is a 2500+ item firehose, so it is filtered to Entra-relevant resource/API-level deprecations only (headline-sentence match + recency/deadline gate) — typically 1–3 high-signal items. |
Changelog parsers track raw-entry counts; if a source matches zero entries the API response includes a warnings[] entry so upstream format drift surfaces instead of failing silently.
- Preview — public preview features
- GA — generally available
- Retirement — features being deprecated/retired
- Breaking Change — changes requiring action
- Plan for Change — upcoming changes
- Updated — documentation updates
Tracked per item based on Microsoft's own categorization (Entra ID Protection, Conditional Access, External ID, B2C, etc.).
- 🔍 Full-text search — across title, description, category, type
- 🏷️ Type filters — Preview, GA, Retirement, Breaking Change, Plan for Change
- 📂 Service category pills — filter by Entra service area
- 📅 Date range picker — scope by time period
- 📊 Stats bar — total items, breakdown by type
- 🔗 Crosslinks to aboutcloud.io and entraerrors.aboutcloud.io
- 🌙 Dark theme (Entra-inspired)
- 📣 Announced date display — cards without a deadline show "Announced Mon YYYY" instead of an empty right panel
- 🔃 Newest-announced sort — sort the entire feed by
announcedDatedescending to see what's freshest - ⭐ On Radar (client-side watchlist) — star any item to add it to your personal watchlist; persisted in
localStorageunder keyentratracker_radar; filter to starred items with the "On Radar" toggle; cross-device sync is out of scope (see ROADMAP.md) - 📡 Subscribe / Export — popover button surfacing RSS feeds (full and External ID), CSV export, and JSON API with one-click copy-to-clipboard for pasting into RSS readers, Teams, Power Automate, and spreadsheets
├── api/ # Worker script
│ ├── worker.js # Full worker source
│ └── wrangler.toml # Worker configuration
├── web/ # Pages frontend
│ ├── index.html # Full frontend
│ └── wrangler.toml # Pages configuration
├── .github/workflows/ # CI/CD
│ └── trivy-scan.yml # Automated security scanning
├── architecture.svg # Architecture diagram
├── trivy-badge.svg # Auto-updated security badge
├── LICENSE
└── README.md
- Clone:
git clone https://github.com/arusso-aboutcloud/Entra-Tracker.git - Install Wrangler:
npm install -g wrangler - Create KV namespace:
wrangler kv:namespace create ENTRA_CACHE - Update
wrangler.tomlwith your KV namespace ID - Deploy:
wrangler deploy
MIT — see LICENSE for full text.
💼 Using this commercially? MIT licensed and free for personal, educational, and open-source projects.
Building something commercial (SaaS, managed services, reselling)? I'd love to chat —
contact me
Last reconciled: 2026-04-29