Microsoft Defender for Identity: Unified identity timeline on the Identity page Beta
Data as of 41 minutes ago (9 September 2026)
Description
The updated identity timeline provides security teams with a single chronological view of activity and alerts associated with an identity and its linked accounts. It normalizes activity from integrated Microsoft security products, including Microsoft Entra sign-ins, Microsoft Graph audit events, SaaS and cloud activity, and device logons. New fields and filters include Source table, Session ID, and Unique token identifier, with expanded Conditional Access and event context.
Change history
Added to the roadmap 1 September 2026. Tracked here since 1 September 2026. Earliest target we recorded: September 2026 (since tracked — Microsoft may have moved it before we started watching).
Nothing has changed on this item since tracking began on 1 September 2026. Changes appear here as Microsoft updates the feed.