Automatic onboarding for Microsoft Sentinel
📅 Microsoft began automatically onboarding remaining managed Sentinel customers into the Defender portal experience in September 2026.
⏳ Tenant administrators receive notice roughly 30 days before their scheduled move, and existing connectors, content and data remain.
💡 MSSPs managing multiple workspaces need particular care: Microsoft selects one primary workspace for Defender XDR alerts and incidents, and XDR-dependent content in secondary workspaces may need migration.
💡 Other managed customers require no action under this notice.
⏳ Partners should review workspace dependencies and notifications before the move; the separate Sentinel experience in the Azure portal is scheduled to retire on March 31, 2027.
Partner briefing
- What it is
Automatic Sentinel onboarding to the Defender portal.
- What’s changing
Onboarding began September 2026 with roughly 30 days' notice. Existing content and data remain; MSSPs must review primary-workspace selection and secondary-workspace dependencies.
- Why it matters
Avoid disruption to XDR-dependent content. The separate Azure portal experience is scheduled to retire March 31, 2027.
- Who it affects
MSSPs and partners administering affected Sentinel customers.