Identity Secure Score in Microsoft Entra ID

Administrators need a quick measure of how well the tenant follows identity best practice. Identity Secure Score provides it, with a to-do list attached.

Identity Secure Score is a percentage that shows how closely the tenant is aligned with Microsoft’s identity security recommendations. It is available to free and paid customers, at Entra ID > Identity Secure Score, or Entra ID > Overview > Recommendations filtered to Security. Learn’s procedure signs in as at least Global Reader to view it; updating an action’s status needs at least SharePoint Administrator per the page’s prerequisites.

• Recalculated every 24 hours: Microsoft compares the tenant’s configuration with best practice once a day and calculates a new score, so a change won’t show immediately.
• Example recommendations include designating more than one Global Administrator, not expiring passwords, requiring MFA for administrative roles, enabling a policy to block legacy authentication, ensuring all users can complete MFA, enabling SSPR, protecting users with sign-in and user risk policies, and using least privileged administrative roles. Some recommendations need a paid licence to view and act on.
• Scoring: some actions are all-or-nothing; others give partial credit, such as MFA for some users.
• Statuses: To address, Planned, Risk accepted (no points, hidden from the list), and Resolved through third party or alternate mitigation (points awarded). Ignored recommendations don’t count towards the score.
• It is the identity part of Microsoft Secure Score (Chapter 3) and doesn’t measure the likelihood of a breach.

Common trap: Expecting the score to rise straight after enabling MFA for administrators - Identity Secure Score is recalculated every 24 hours, so improvements appear after the next daily evaluation.

Get the whole book

This note is one section of Ultra Transcenders AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals, an independent study guide that explains every topic the exam covers by technology, with comparison tables, diagrams and the common traps, plus a glossary linked to Microsoft Learn.

About the book · AB-900 terms in the glossary · All AB-900 study notes