Microsoft Entra: App Deactivation
Admins and app owners can now deactivate apps to block token requests and user sign-ins without deleting the app or losing its configuration. This is useful for pausing suspicious or unused apps during investigations and tenant cleanup.
Key dates
- 2024 — rollout (Rolling out to Worldwide Standard Multi-Tenant)
Microsoft's description
Admins or app owners can now safely pause an app’s access to Entra protected resources without deleting it or disrupting configuration. When deactivated, the app and its service principals globally (across tenants) can’t request new tokens and user sign ins are blocked, while existing tokens simply expire on their normal schedule. This makes it easy for admins to temporarily freeze suspicious or unused apps during investigations, bulk cleanup, or tenant hygiene work. This capability is now available in the Entra admin center (App registrations, Enterprise apps) and Microsoft Graph API.