Secure Score: Mismatch between Microsoft 365 Security Center and Graph API

%3CLINGO-SUB%20id%3D%22lingo-sub-1526740%22%20slang%3D%22en-US%22%3ESecure%20Score%3A%20Mismatch%20between%20Microsoft%20365%20Security%20Center%20and%20Graph%20API%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1526740%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20wondering%20that%20there%20is%20a%20mismatch%20between%20the%20Secure%20Score%20value%20in%20the%20Microsoft%20365%20Security%20Center%20and%20the%20Graph%20API.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20I%20check%20the%20Secure%20Score%20in%20the%20Microsoft%20365%20Security%20Center%2C%20the%20displayed%20score%20is%2048.09%25%20and%26nbsp%3B377%20from%20784%20points.%20When%20I%20query%20the%20values%20from%20the%20Microsoft%20Graph%2C%20the%20returned%20score%20is%2044.88%25%20and%20136%20from%20303%20points.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20receive%20values%20from%20the%20Graph%2C%20I%20do%20a%20GET%20on%26nbsp%3B%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fgraph.microsoft.com%2Fv1.0%2Fsecurity%2FsecureScores%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgraph.microsoft.com%2Fv1.0%2Fsecurity%2FsecureScores%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20you%20tell%20where%20the%20mismatch%20is%20coming%20from%3F%20Do%20I%20need%20further%20parameters%20using%20the%20API%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKind%20regards%2C%3C%2FP%3E%3CP%3EJulian%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1530947%22%20slang%3D%22en-US%22%3ERe%3A%20Secure%20Score%3A%20Mismatch%20between%20Microsoft%20365%20Security%20Center%20and%20Graph%20API%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1530947%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F712944%22%20target%3D%22_blank%22%3E%40julianmwe%3C%2FA%3E%26nbsp%3BUse%20the%20developer%20tools%20in%20your%20browser%20to%20see%20what%20API'%20are%20called%20when%20the%20dashboard%20is%20created.%20That%20will%20give%20you%20more%20insight.%20I%20don't%20think%20the%20Graph%20API%20is%20used%20to%20build%20this%20dashboard.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22JanBakker330_0-1595081409845.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F206237iEE3EE32378B20BF2%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22JanBakker330_0-1595081409845.png%22%20alt%3D%22JanBakker330_0-1595081409845.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1535077%22%20slang%3D%22en-US%22%3ERe%3A%20Secure%20Score%3A%20Mismatch%20between%20Microsoft%20365%20Security%20Center%20and%20Graph%20API%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535077%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F470541%22%20target%3D%22_blank%22%3E%40JanBakker330%3C%2FA%3E.%20I%20figured%20out%20that%20the%20difference%20comes%20from%20the%20fact%2C%20that%20I%20used%20the%20Secure%20Score%20preview%20in%20the%20portal%20which%20is%20not%20included%20in%20the%20API%20yet.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1535304%22%20slang%3D%22en-US%22%3ERe%3A%20Secure%20Score%3A%20Mismatch%20between%20Microsoft%20365%20Security%20Center%20and%20Graph%20API%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535304%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F712944%22%20target%3D%22_blank%22%3E%40julianmwe%3C%2FA%3E%26nbsp%3Bah%20okay.%20How%20did%20you%20found%20the%20API's%3F%20With%20the%20developer%20tools%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1535489%22%20slang%3D%22en-US%22%3ERe%3A%20Secure%20Score%3A%20Mismatch%20between%20Microsoft%20365%20Security%20Center%20and%20Graph%20API%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535489%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F470541%22%20target%3D%22_blank%22%3E%40JanBakker330%3C%2FA%3E%26nbsp%3BNope.%20I%20noticed%20a%20link%20to%20the%20stable%20release%20of%20the%20Secure%20Score%20in%20the%20portal%20which%20simply%20matches%20with%20the%20values%20I%20got%20from%20the%20API.%20Also%20a%20colleague%20shared%20this%20link%20with%20me%20were%20is%20stated%2C%20that%20the%20API%20does%20not%20cover%20the%20functionalities%20of%20the%20portal%20yet%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Fmtp%2Fmicrosoft-secure-score%3Fview%3Do365-worldwide%23incompatibility-with-identity-secure-score-and-graph-api%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Fmtp%2Fmicrosoft-secure-score%3Fview%3Do365-worldwide%23incompatibility-with-identity-secure-score-and-graph-api%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20tried%20to%20get%20the%20right%20Uri%20with%20the%20Dev%20Tools.%20It%20seems%20that%20the%20portal%20is%20using%20%22%3CA%20href%3D%22https%3A%2F%2Fsecurescore.office.com%2Fsecurity%26quot%3B%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsecurescore.office.com%2Fsecurity%22%3C%2FA%3E%26nbsp%3Bbut%20I%20don't%20not%20how%20to%20use%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20decided%20to%20wait%20until%20the%20preview%20functionality%20is%20also%20available%20in%20the%20API.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi there,

 

I am wondering that there is a mismatch between the Secure Score value in the Microsoft 365 Security Center and the Graph API.

 

When I check the Secure Score in the Microsoft 365 Security Center, the displayed score is 48.09% and 377 from 784 points. When I query the values from the Microsoft Graph, the returned score is 44.88% and 136 from 303 points.

 

To receive values from the Graph, I do a GET on https://graph.microsoft.com/v1.0/security/secureScores

 

Can you tell where the mismatch is coming from? Do I need further parameters using the API?

 

Kind regards,

Julian

4 Replies

@julianmwe Use the developer tools in your browser to see what API' are called when the dashboard is created. That will give you more insight. I don't think the Graph API is used to build this dashboard.

JanBakker330_0-1595081409845.png

 

Thanks @JanBakkerOrphaned. I figured out that the difference comes from the fact, that I used the Secure Score preview in the portal which is not included in the API yet.

@julianmwe ah okay. How did you found the API's? With the developer tools? 

@JanBakkerOrphaned Nope. I noticed a link to the stable release of the Secure Score in the portal which simply matches with the values I got from the API. Also a colleague shared this link with me were is stated, that the API does not cover the functionalities of the portal yet: https://docs.microsoft.com/en-us/microsoft-365/security/mtp/microsoft-secure-score?view=o365-worldwi...

 

I also tried to get the right Uri with the Dev Tools. It seems that the portal is using "https://securescore.office.com/security" but I don't not how to use it.

 

I decided to wait until the preview functionality is also available in the API.