usx docs auto onboard auto redirect

Author: batamig

unified-secops-platform/microsoft-sentinel-onboard.md

@@ -24,12 +24,16 @@ search.appverid:
 appliesto:
     - Microsoft Defender XDR
     - Microsoft Sentinel in the Microsoft Defender portal
-ms.date: 03/17/2025
+ms.date: 06/12/2025
 ---
 
 # Connect Microsoft Sentinel to the Microsoft Defender portal
 
-Microsoft Sentinel is generally available in the Microsoft Defender portal, with or without Microsoft Defender XDR or an E5 license. When you onboard Microsoft Sentinel to the Defender portal together Microsoft Defender XDR, you unify capabilities like incident management and advanced hunting. Reduce tool switching and build a more context-focused investigation that expedites incident response and stops breaches faster. For more information, see:
+Microsoft Sentinel is generally available in the Microsoft Defender portal, with or without Microsoft Defender XDR or an E5 license. Using Microsoft Sentinel in the Defender portal together with Microsoft Defender XDR services, you unify capabilities like incident management and advanced hunting. Reduce tool switching and build a more context-focused investigation that expedites incident response and stops breaches faster. 
+
+This article is relevant for customers whose Microsoft Sentinel workspaces are not yet connected to the Defender portal. New customers onboarding to Microsoft Sentinel after July 1, 2025, with permissions of a subscription [Owner](/azure/role-based-access-control/built-in-roles#owner) or a [User access administrator](/azure/role-based-access-control/built-in-roles#user-access-administrator), are automatically onboarded to the Defender portal.
+
+For more information, see:
 
 - [What are unified security operations?](overview-unified-security.md)
 - [Microsoft Sentinel in the Microsoft Defender portal](https://go.microsoft.com/fwlink/p/?linkid=2263690)

unified-secops-platform/mto-overview.md

@@ -35,7 +35,7 @@ If you have tenants with Microsoft Sentinel workspaces onboarded to the Defender
 - Proactively search for SIEM and XDR data across multiple tenants.
 - Manage cases across multiple tenants.
 
-You must onboard each workspace to the Defender portal for each of your tenants separately, as you would in a single-tenant scenario.
+Each workspace must be onboarded to the Defender portal for each of your tenants separately, as you would in a single-tenant scenario.
 
 For more information, see:
 

unified-secops-platform/overview-plan.md

@@ -102,7 +102,7 @@ Before you deploy Microsoft Defender services for unified security operations, m
 
 ## Plan your Log Analytics workspace architecture
 
-To onboard Microsoft Sentinel to the Defender portal, you first need a Log Analytics workspace enabled for Microsoft Sentinel. A single Log Analytics workspace might be sufficient for many environments, but many organizations create multiple workspaces to optimize costs and better meet different business requirements. 
+To get started with unified security operations using Microsoft Sentinel in the Defender portal, you first need a Log Analytics workspace enabled for Microsoft Sentinel. A single Log Analytics workspace might be sufficient for many environments, but many organizations create multiple workspaces to optimize costs and better meet different business requirements.
 
 Design the Log Analytics workspace you want to enable for Microsoft Sentinel. Consider parameters such as any compliance requirements you have for data collection and storage and how to control access to Microsoft Sentinel data.
 
@@ -186,7 +186,7 @@ The Microsoft Defender portal unifies the following role-based access control (R
 
 While permissions granted through Azure RBAC for Microsoft Sentinel are federated during runtime with Defender's unified RBAC, Azure RBAC and Defender RBAC are still managed separately.
 
-Defender's unified RBAC isn't required to onboard your workspace to the Defender portal, and Microsoft Sentinel permissions continue to work as expected in the Defender portal even without unified RBAC. However, using unified RBAC does simplify the delegation of permissions across Defender solutions. For more information, see [Activate Microsoft Defender XDR Unified role-based access control (RBAC)](/defender-xdr/activate-defender-rbac).
+Defender's unified RBAC isn't required for your workspace to be onboarded to the Defender portal, and Microsoft Sentinel permissions continue to work as expected in the Defender portal even without unified RBAC. However, using unified RBAC does simplify the delegation of permissions across Defender solutions. For more information, see [Activate Microsoft Defender XDR Unified role-based access control (RBAC)](/defender-xdr/activate-defender-rbac).
 
 [!INCLUDE [mininum-access-requirements](includes/mininum-access-requirements.md)]
 

unified-secops-platform/whats-new.md

@@ -20,6 +20,18 @@ ms.topic: concept-article
 
 This article lists recent features added for unified security operations in the Microsoft Defender portal.
 
+## July 2025
+
+- [New Microsoft Sentinel customers only: Automatic onboarding and redirection to the Microsoft Defender portal](#new-microsoft-sentinel-customers-only-automatic-onboarding-and-redirection-to-the-microsoft-defender-portal)
+
+### New Microsoft Sentinel customers only: Automatic onboarding and redirection to the Microsoft Defender portal
+
+New customers onboarding to Microsoft Sentinel now automatically have their workspaces onboarded to the Microsoft Defender portal, and use Microsoft Sentinel in the Defender portal only. For these new customers, accessing Microsoft Sentinel in the Azure portal automatically shows redirection links to Defender.
+
+This change streamlines the onboarding process and ensures that new customers can immediately take advantage of unified security operations capabilities without the extra step of manually onboarding their workspaces.
+
+For more information, see [Onboard Microsoft Sentinel](quickstart-onboard.md) and [Microsoft Sentinel in the Microsoft Defender portal](microsoft-sentinel-defender-portal.md).
+
 ## May 2025
 
 - [Unified role-based access control in multitenant portal (Preview)](#unified-role-based-access-control-in-multitenant-management-preview)