Defender for Identity now supports up to 1,000 sensors per workspace,
Defender for IdentityMicrosoft
May 2026
Increased sensor capacity
- Defender for Identity now supports up to 1,000 sensors per workspace, increased from the previous limit of 350. To add more than 1,000 sensors, contact Defender for Identity support.
New Defender for Identity security alerts
These new alerts were added to the Defender for Identity security alerts:
New alerts related to Entra ID:
- Failed credential abuse attempt in Entra ID authentication
- Malicious sign in from a randomized user agent
- Possible use of a stolen session cookie
- Stolen session cookie replay detected
- Suspected Conditional Access bypass via non-compliant device
- Suspicious addition of default third‑party MFA method to user account
