The sub-domains feature in Microsoft Defender for Cloud Apps – Cloud Discovery will be retired starting September 22, 2025, and fully deprecated by December 31, 2025, due to low usage. No admin action is needed, but sub-domain insights will no longer be available after deprecation.
Due to low usage, we’re retiring the sub-domains feature in Microsoft Defender for Cloud Apps – Cloud Discovery. This change simplifies the Cloud Discovery experience and aligns with broader improvements in app discovery and reporting.
When this will happen
This change will be applied automatically. No admin action is required.
How this affects your organization
If your organization currently uses sub-domain discovery insights in Cloud Discovery, these insights will no longer be available after the deprecation date. This may impact how administrators view and analyze discovered apps at the sub-domain level.
The feature is currently on by default for organizations using Cloud Discovery.
What you can do to prepare
We recommend reviewing your current Cloud Discovery configurations and adjusting any workflows or reports that rely on sub-domain insights. For more information on discovered apps and alternative insights, visit:
Compliance considerations
No compliance considerations identified, review as appropriate for your organization.