By default, MSSP customers access their Microsoft Defender XDR tenant through the following URL: https://security.microsoft.com/.

Microsoft Defender XDR is an XDR platform that provides security across your multiplatform endpoints, hybrid identities, email, collaboration tools, and cloud apps. It uses incident-level visibility across the cyberattack chain, automatic cyberattack disruption, and unified security and access management to accelerate responses to sophisticated cyberattacks.

The Defender portal emphasizes quick access to information, simpler layouts, and bringing related information together for easier use. It includes Microsoft Defender XDR and features and capabilities of other Microsoft security solutions that you have provisioned access to.

Learn how to enable Microsoft Defender XDR and start integrating your security incident and response.

Step 1: Turn on Microsoft Defender XDR You'll first need to turn on the service by making sure you have the right license in place and roles are assigned so that you can access the portal.

Learn how to manage access to Microsoft Defender XDR capabilities with Microsoft Entra global roles.

Get an overview of what to expect when running Microsoft Defender for Endpoint in the Microsoft Defender portal

Learn about the robust security solutions in Microsoft Defender XDR so that you can better protect your enterprise across attack surfaces.

As a workaround, I recommend that you create a new user and assign appropriate roles as mentioned here: https://learn.microsoft.com/en-us/defender-xdr/prerequisites#required-permissions

The Defender portal combines services like Microsoft Defender XDR, Microsoft Sentinel, Microsoft Security Exposure Management, and Microsoft Security Copilot for unified security operations.

You’ll also explore the options on the navigation panel that provide quick access to functionality that is part of Microsoft’s Extended Detection and Response (XDR) solution: Microsoft Defender for Endpoints, and Microsoft Defender for Office 365 (email and collaboration).

Your security center in Defender for Business is the Microsoft Defender portal. Learn how to navigate the portal, and see your next steps.

October 2, 2025 - It continuously learns from this data, identifying patterns that indicate potential threats, such as unusual login attempts or abnormal network traffic. By using behavioral analytics, it understands what’s normal for a user or system and detects deviations that could signal an attack. This automated detection reduces the need for manual investigation, quickly identifies threats, and prioritizes them based on severity, enabling faster and more efficient responses to incidents. Azure XDR seamlessly integrates with a wide range of Microsoft services and products, including Microsoft 365, Microsoft Defender for Identity, Microsoft Defender for Endpoint, Azure Active Directory, and more.

Since your application interacts with Microsoft Defender XDR on behalf of your users, it needs be approved for every tenant on which you intend to use it. The Active Directory administrator for each tenant needs to select the consent link and approve your app. ... https://login.microsofton...

You must at least be a security administrator in Microsoft Entra ID to turn on Microsoft Defender XDR.

Learn about the services and features available with Microsoft Defender XDR in the Microsoft Defender portal.

Learn how to use Microsoft Defender for Identity within the Microsoft Defender portal to monitor and manage security across your Microsoft identities, data, devices, apps, and infrastructure.

Learn about how Microsoft Defender for Office 365 operates in the Microsoft Defender portal.

Microsoft Defender XDR takes automatic action to prevent or stop the attack and self-heal affected mailboxes, endpoints, and user identities.

Learn about the Microsoft Defender XDR for US Government customers requirements and capabilities available