A cloud-native solution that protects workloads across hybrid and multi-cloud environments with threat detection and security recommendations
Hi Caroline,
You're referring to two different identifiers:
In Microsoft Entra, the Tenant ID and Organization ID are the same. These terms are used interchangeably and refer to your Azure AD tenant's unique identifier.
In the Microsoft Defender portal, however, the Tenant ID and Organization ID are distinct. The Tenant ID remains the same as in Entra, but the Organization ID is a separate identifier used specifically within the security context.
To view both:
- Go to https://security.microsoft.com
- Navigate to Settings > Microsoft Defender XDR > Account
There, you'll find:
- The Tenant ID (same as in Entra)
- A unique Organization ID used by Defender
🔍 Note: The Organization ID shown in defender portal is the one that appears in attack map visualizations and other security-specific workflows.
Below are some images to offer clarity.
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.