Microsoft has launched a public preview of new authentication governance controls in Power Pages, giving administrators greater flexibility in managing sign-in options. The update allows administrators to allow or block individual authentication protocols, supported OAuth 2.0 identity providers, and local authentication directly from the Power Platform admin center (PPAC).
Previously, administrators could only enable or disable external authentication as a whole. The new controls let them fine-tune access, such as allowing external authentication while blocking specific protocols or identity providers. Administrators can now manage OpenID Connect, SAML 2.0, WS-Federation, and OAuth 2.0 protocols, as well as Google, Microsoft, and Facebook identity providers.
The update also introduces local authentication controls, allowing administrators to restrict sign-ins using locally stored usernames and passwords. This feature is particularly useful for organizations that need to align authentication choices with their security requirements while supporting different sign-in needs for various portals.
Administrators can centrally manage authentication options, ensuring consistency across different sites. Blocked protocols and identity providers appear greyed out in the Power Pages design studio, with a clear message explaining the restriction. For example, an enterprise can use OpenID Connect for customer portals while allowing SAML 2.0 only for a partner portal that requires it.