Share via

Is Microsoft Graph Security going away and being replaced with Microsoft Graph Security API V2

Gray, Jeff 1 Reputation point
2026-02-04T21:58:38.9266667+00:00

We currently are using Sophos for our mdr. We have a Microsoft Graph Security integration to our 365 tenent (i think that is correct). Microsoft states: Organizations currently using the legacy Alerts API must migrate to the v2 API to ensure continued data ingestion and functionality before its retirement. Which it says is April 2026, and this is also stated on Sophos website. I am really confused on this. Our current MS365 licenses are Business Basic and I cannot get the v2 to work within Sophos. Is this because of our MS365 license level? Microsoft Graph Security V1 is currently working.

Thanks,

Microsoft Security | Microsoft Graph
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Q&A Assist
    2026-02-04T21:58:48.07+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    Microsoft Graph Security is not going away, but the legacy Alerts API is being deprecated and will be removed by April 2026. Organizations currently using the legacy Alerts API are required to migrate to the new Microsoft Graph Security API V2 to ensure continued data ingestion and functionality. This migration is necessary as the legacy API will no longer be supported after the specified date.

    Regarding your issue with the Microsoft Graph Security API V2 not working within Sophos, it is possible that your current Microsoft 365 Business Basic license may not support the features or functionalities required for the V2 API. It's advisable to check with Sophos support or Microsoft documentation to confirm the compatibility of your license with the new API.

    Currently, the Microsoft Graph Security V1 is still operational, but transitioning to V2 is essential for future-proofing your integration as the legacy API will be phased out.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.