{"id":58910,"date":"2025-07-01T17:00:00","date_gmt":"2025-07-01T17:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=140893"},"modified":"2025-07-01T17:00:00","modified_gmt":"2025-07-01T17:00:00","slug":"planning-your-move-to-microsoft-defender-portal-for-all-microsoft-sentinel-customers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/planning-your-move-to-microsoft-defender-portal-for-all-microsoft-sentinel-customers\/","title":{"rendered":"Planning your move to Microsoft Defender portal for all Microsoft Sentinel customers\u00a0"},"content":{"rendered":"

In November 2023, Microsoft <\/span>announced<\/a> our strategy to unify security operations by bringing the best of XDR and SIEM together. Our first step was bringing Microsoft Sentinel into the Microsoft Defender portal, giving teams a single, comprehensive view of incidents, reducing queue management, enriching threat intel, streamlining response and enabling SOC teams to take advantage of Gen AI in their day-to-day workflow. Since then, considerable progress has been made with thousands of customers using this new unified experience; to enhance the value customers gain when using Sentinel in the Defender portal, multi-tenancy and multi-workspace support was added to help customers with more sophisticated deployments.<\/span><\/p>\n

Our mission is to unify security operations by bringing all your data, workflows, and people together to unlock new capabilities and drive better security outcomes. As a strong example of this, last year we added extended posture management, delivering powerful posture insights to the SOC team. This integration helps build a closed-loop feedback system between your pre- and post-breach efforts. Exposure Management is just one example. By bringing everything together, we can take full advantage of AI and automation to shift from a reactive to predictive SOC that anticipates threats and proactively takes action to defend against them.<\/p>\n

Beyond Exposure Management, Microsoft has been constantly innovating in the Defender experience, adding not just SIEM but also Security Copilot. The Sentinel experience within the Defender portal is the focus of our innovation energy and where we will continue to add advanced Sentinel capabilities going forward.<\/p>\n

Onboarding to the new unified experience is easy and doesn\u2019t require a typical migration. Just a few clicks and permissions. Customers can continue to use Sentinel in the Azure portal while it is available even after choosing to transition. <\/span><\/p>\n

Today, we\u2019re announcing that we are moving to the next phase of the transition with a target to retire the Azure portal for Microsoft Sentinel by July 1, 2026.  Customers not yet using the Defender portal should plan their transition accordingly.<\/strong><\/span><\/span><\/p>\n

 <\/span><\/span><\/p>\n