Microsoft Defender for Identity: New recommendations added to Microsoft Secure Score
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Rollout
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
Schedule dates changed in the text
Date phrases in schedule sentences differ between the versions this installation saw- Seen 29 Oct 2025
late October 2025, mid-November 2025→ late January 2026, late February 2026
Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.
What the notice says
Microsoft’s text, safely structuredUpdated October 29, 2025: We have updated the timeline. Thank you for your patience.
Introduction
We’re enhancing Microsoft Secure Score by introducing new improvement actions based on Microsoft Defender for Identity posture recommendations for PingOne. These updates provide a more accurate reflection of your organization’s identity security posture and help strengthen your overall security configuration.
When this will happen
- Public Preview: Rollout begins in late November 2025 (previously late October) and completes by mid-December 2025 (previously mid-November).
- General Availability (Worldwide, GCC, GCC High, and DoD): Rollout begins in late January 2026 (previously late November 2025) and completes by late February 2026 (previously mid-December 2025).
How this affects your organization
Who is affected: Tenants with a PingOne connector configured for Microsoft Defender for Identity.
What will happen:
New posture recommendations will appear in Microsoft Secure Score as improvement actions:
- Limit the number of PingOne accounts with organization admin role
- Assign multi-factor authentication for PingOne privileged user accounts: Image: user settings
- Change password for PingOne privileged user accounts
- Remove stale PingOne privileged accounts
- High number of PingOne accounts with a privileged role assigned
These recommendations are enabled by default and require no configuration changes.
What you can do to prepare
- No admin action is required before or after rollout.
- Review your current identity configuration to assess potential impact.
- Notify relevant administrators and update internal documentation as needed.
- Regularly review Microsoft Secure Score to monitor and act on new improvement suggestions.
Compliance considerations
No compliance considerations identified, review as appropriate for your organization.
What changed
Between archive captures, newest first- Tags
Feature update, User impact, Admin impact→ Updated message, Feature update, User impact, Admin impact
Updated October 29, 2025: We have updated the timeline. Thank you for your patience. Introduction: We’re enhancing Microsoft Secure Score by introducing new improvement actions based … security configuration. When this will happen: Public Preview: Rollout begins in late
OctoberNovember 2025 (previously late October) and completes bymid-November 2025.mid-December 2025 (previously mid-November). General Availability (Worldwide, GCC, GCC High, and DoD): Rollout begins in late January 2026 (previously late November20252025) and completes by late February 2026 (previously mid-December2025.2025). How this affects your organization: Who is affected: Tenants with a PingOne …- Tags
- · first version seen
Learn more
Links from the notice and their documentation checksRelated public evidence
No related evidence found in this installation's recent collection. This does not establish that no announcement exists.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.