Sentinel Simplified: Multi-Account Support Arrives for Microsoft's SIEM Platform

Microsoft has introduced multi-account support for its security information and event management (SIEM) platform, Microsoft Sentinel. This feature simplifies data collection by allowing organizations to consolidate security telemetry from multiple accounts into one workspace.

The new capability supports Auth0, CrowdStrike Falcon, and Salesforce Service Cloud data connectors, which can ingest events from multiple tenants or environments through a single connector configuration.

Organizations with multiple subsidiaries, regional environments, or recently acquired businesses often struggle to consolidate security data. The multi-account support feature reduces operational complexity by allowing administrators to add additional accounts through the connector interface using a new 'Add Account' workflow.