Microsoft has announced that it's working on a major security update for Entra ID that will block external script injection during authentication.