check before: 2025-09-22
Product:
Defender, Defender for Cloud Apps, Defender XDR
Platform:
Online, World tenant
Status:
Change type:
Admin impact, Retirement
Links:
Details:
Summary:
The sub-domains feature in Microsoft Defender for Cloud Apps – Cloud Discovery will be retired starting September 22, 2025, and fully deprecated by December 31, 2025, due to low usage. No admin action is needed, but sub-domain insights will no longer be available after deprecation.
Details:
Due to low usage, we're retiring the sub-domains feature in Microsoft Defender for Cloud Apps - Cloud Discovery. This change simplifies the Cloud Discovery experience and aligns with broader improvements in app discovery and reporting.
When this will happen
Start of retirement: September 22, 2025
Full deprecation: December 31, 2025
This change will be applied automatically. No admin action is required.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-08-26
updated:
2025-08-26
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Loss of Sub-Domain Insights
The retirement of the sub-domains feature will result in the loss of insights related to sub-domains, affecting the ability to analyze discovered apps at a granular level.
- roles: Cloud Administrator, Security Analyst
- references: https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-apps
Impact on Reporting
Reports that rely on sub-domain insights will be incomplete or inaccurate, potentially leading to misinformed decisions regarding app usage and security.
- roles: Cloud Administrator, Compliance Officer
- references: https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-apps
Workflow Adjustments Required
Organizations will need to adjust workflows that depend on sub-domain data, which may lead to temporary disruptions in operations during the transition.
- roles: Cloud Administrator, IT Operations Manager
- references: https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-apps
User Experience Degradation
Users may experience a degradation in the quality of app discovery insights, leading to potential security oversights.
- roles: End User, Security Analyst
- references: https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-apps
Increased Risk of Security Gaps
Without sub-domain insights, there may be an increased risk of security gaps as administrators may overlook critical app usage patterns.
- roles: Security Analyst, IT Security Manager
- references: https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-apps
Configutation Options**
XXXXXXX ... paid membership only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
Microsoft is planning to retire the sub-domains feature in Defender for Cloud Apps' Cloud Discovery. Think of this change like a company deciding to stop offering a specific product because not many customers are buying it. The sub-domains feature is similar to a tool that lets you see detailed parts of a website, like looking at different departments within a large store. However, since not many people are using this tool, Microsoft has decided to phase it out.
Starting September 22, 2025, the process of retiring this feature will begin, and by December 31, 2025, it will be completely removed. This means that if your organization uses this feature to gain insights into sub-domains, those insights will no longer be available after the deprecation date. It's like a store deciding to stop selling a particular item; once it's gone, you won't be able to buy it anymore.
The good news is that you don't need to do anything to prepare for this change, as it will happen automatically. However, if your current processes rely on these sub-domain insights, you might want to review and adjust your workflows or reports accordingly. This is similar to how a business might need to find alternative suppliers if a product they rely on is discontinued.
There are no compliance issues associated with this change, but it's always a good idea to review how it might affect your organization. For more information on alternative insights and discovered apps, you can visit Microsoft's documentation online.
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 months ago ago
