Defender API and Defender Portal

Hello Oscar,
Thank you for reaching out.
For Entra Joined Devices, when you Run this API , the response should give you the aadDeviceId and the isAadjoined should show as true.
You can verify that the Device is AADJoined by looking at the Join type from Entra admin centre under Devices.

For Devices that are not Entra Joined, the response from the api should give you the aadDeviceId and the isAadJoined should show as false.

If the Device had been recently onboarded and aadjoined, then it might have been a propagation error, and you can confirm this by trying to run the api once again and see if the response correspons to the above.
I hope this helps to answer your question.

If you find the answer above helpful, please Accept the answer to help anyone in the community who might have a similar question to quickly find the solution.

Hello @Pauline Mbabu

The device was onboarded some time ago, more than a few weeks.

For the AzureADJoin state, the API shows FALSE, but the portal shows TRUE.

Bug?

Best regards,

Oscar