MC1155429 Low
(Updated) Microsoft Defender for Identity: New recommendations added to Microsoft Secure Score
Summary AI-generated
Microsoft Secure Score adds new improvement actions based on Defender for Identity posture recommendations for PingOne, with rollout starting November 2025 and GA in January 2026.
Suggested actions AI-generated
- Review identity configuration
- Notify admins
- Update documentation
- Monitor Secure Score for new suggestions
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1179155 (Updated) Microsoft Defender for Identity: New recommendation added to Microsoft Secure Score
- MC1251207 Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint
- MC1191616 Microsoft Secure Score: New recommendations for Microsoft Defender for Endpoint
- MC1192254 Microsoft Defender for Endpoint: New Microsoft Secure Score recommendations
- MC1466750 Microsoft Secure Score: New AI-readiness recommendations for device security
- MC1358832 (Updated) Microsoft Secure Score: New recommendation to reduce inbound internet exposure
Original post from Microsoft
Updated October 29, 2025: We have updated the timeline. Thank you for your patience.
[Introduction:]
We’re enhancing Microsoft Secure Score by introducing new improvement actions based on Microsoft Defender for Identity posture recommendations for PingOne. These updates provide a more accurate reflection of your organization’s identity security posture and help strengthen your overall security configuration.
[When this will happen:]
- Public Preview: Rollout begins in late November 2025 (previously late October) and completes by mid-December 2025 (previously mid-November).
- General Availability (Worldwide, GCC, GCC High, and DoD): Rollout begins in late January 2026 (previously late November 2025) and completes by late February 2026 (previously mid-December 2025).
[How this affects your organization:]
Who is affected: Tenants with a PingOne connector configured for Microsoft Defender for Identity.
What will happen:
New posture recommendations will appear in Microsoft Secure Score as improvement actions:
- Limit the number of PingOne accounts with organization admin role
- Assign multi-factor authentication for PingOne privileged user accounts:
- Change password for PingOne privileged user accounts
- Remove stale PingOne privileged accounts
- High number of PingOne accounts with a privileged role assigned
These recommendations are enabled by default and require no configuration changes.
[What you can do to prepare:]
- No admin action is required before or after rollout.
- Review your current identity configuration to assess potential impact.
- Notify relevant administrators and update internal documentation as needed.
- Regularly review Microsoft Secure Score to monitor and act on new improvement suggestions.
[Compliance considerations:]
No compliance considerations identified, review as appropriate for your organization.
Additional details from Microsoft
- Summary
- Microsoft Secure Score will add new improvement actions based on Microsoft Defender for Identity recommendations for PingOne, rolling out from November 2025 to February 2026. These default-enabled actions target PingOne privileged account security, requiring no admin changes but encouraging review and monitoring by organizations with PingOne connectors.