View your identity coverage and maturity (Preview)

@@ -1,14 +1,14 @@ --- title: View your identity coverage and maturity (Preview) description: Learn how to use the Coverage and maturity page in Microsoft Defender to check your identity protection status and close coverage gaps in your environments.-ms.date: 06/16/2026+ms.date: 09/02/2026 ms.topic: how-to ms.author: abbyweisberg author: AbbyMSFT ms.reviewer: maelgami ai-usage: ai-assisted ms.service: defender-xdr-ms.custom: msecd-doc-authoring-1014+ms.custom: msecd-doc-authoring-1016  #customer intent: As a security admin, I want to see how well my identities are protected so that I can find and close coverage gaps in my environments. ---@@ -59,9 +59,7 @@ The maturity level is based on a score ranging from 0 to 100, based on the combi <a name="top-setup-tasks"></a> ## Review top setup tasks to improve coverage -The **Top setup tasks** section shows up to five cards at the top of the page representing the most important things you can do to improve your coverage. Each card shows the task name, source type (such as Identity provider or SaaS), **impact** level, and **estimated effort**.--Tasks are ranked so that high-impact, low-effort items appear first:+The **Top setup tasks** section shows up to five cards at the top of the page representing the most important things you can do to improve your coverage. Each card shows the task name, source type (such as Identity provider or SaaS), and two ranking fields: **impact** (the security benefit of completing the task) and **estimated effort** (the work required to complete it). Tasks are ranked so that high-impact, low-effort items appear first:  1. On-premises sensor deployment, Microsoft Entra ID connector, and app governance 1. SaaS app connectors@@ -154,15 +152,37 @@ The **Coverage progress** list includes the following columns. Select the checkb | Column | Description | | --- | --- | | **Action name** | The setup task, such as connecting a specific app, sensor, or partner solution. |+| **Observed** | Whether the application or integration is detected in your environment. This column isn't available in the **On-premises identities** side panel. | | **Impact** | The security impact of completing the action. | | **Effort** | The estimated effort to complete the action. | -### SaaS identities panel+Most side panels include a **Show Only Observed Applications** toggle. By default, only observed applications and integrations are shown. Turn off the toggle to also see other supported applications and integrations that aren't currently observed.++### On-premises identities panel++The On-premises identities panel shows sensor onboarding and migration progress for discovered servers.++:::image type="content" source="media/on-premises-identities-side-panel.png" alt-text="Screenshot that shows the On-premises identities side panel in Microsoft Defender." lightbox="media/on-premises-identities-side-panel.png":::++The panel includes the following metrics: -The SaaS identities panel includes additional options that aren't available for other coverage sources:+| Metric | Description |+| --- | --- |+| **Onboarded manually** | Servers that are onboarded with sensor version 2. |+| **Activated** | Servers ready for one-click sensor version 3 activation. |+| **Migrated** | Sensors running version 2 that are eligible to move to sensor version 3. |++The **Coverage progress** list can include the following action names:++| Action name | Description |+| --- | --- |+| **Activate V3** | Servers ready for one-click sensor version 3 activation. |+| **Onboarding manually** | Servers that aren't eligible for activation and should be onboarded with sensor version 2. |+| **Migration** | Sensors running version 2 that are eligible to move to sensor version 3. |++### SaaS identities panel -- An **Observed** column that indicates whether each application is detected in your environment.-- A **Show Only Observed Applications** toggle. By default, only observed applications are shown. Turn off the toggle to also see other supported SaaS apps that aren't currently observed.+The SaaS identities panel shows observed SaaS applications and other supported SaaS apps that you can connect.  :::image type="content" source="media/saas-identities-side-panel.png" alt-text="Screenshot that shows the SaaS identities side panel with the Observed column and Show Only Observed Applications toggle in Microsoft Defender." lightbox="media/saas-identities-side-panel.png":::