Four Legacy Azure Function Connectors Marked for Deprecation - Migration to CCF Required

What Changed

Microsoft has officially deprecated four Azure Function-based Data Connectors, marking them with “[DEPRECATED]” prefixes in their titles and descriptions. The affected connectors are:

• Okta Single Sign-On (using Azure Function) - version bumped to 3.1.6
• SentinelOne (using Azure Function) - version bumped to 3.0.9
• Sophos Endpoint Protection (using Azure Function) - version bumped to 3.0.8
• VMware Carbon Black Cloud (using Azure Function) - version bumped to 3.0.8

Migration Path Available

All four solutions already have CCF (Codeless Connector Framework) alternatives available in Microsoft Sentinel Content Hub. Recent release history shows that CCF versions were introduced in March 2026 for these connectors, providing the migration foundation before this deprecation announcement.

Operational Impact

Existing Azure Function deployments will continue to operate but are no longer supported for new installations. Teams using these legacy connectors should prioritize migration to the CCF alternatives to ensure continued vendor support and access to future enhancements. The CCF versions offer improved reliability, simplified deployment, and reduced maintenance overhead compared to the Azure Function implementations.

Affected Files

Solutions/Okta Single Sign-On/Data Connectors/OktaSingleSign-On/Connector_REST_API_FunctionApp_Okta.json
Solutions/SentinelOne/Data Connectors/SentinelOne_API_FunctionApp.json
Solutions/Sophos Endpoint Protection/Data Connectors/SophosEP_API_FunctionApp.json
Solutions/VMware Carbon Black Cloud/Data Connectors/VMwareCarbonBlack_API_FunctionApp.json
(packaging artefacts: 3.0.8.zip, 3.0.9.zip, 3.1.6.zip, ReleaseNotes.md, Solution_EP.json, Solution_Okta.json, Solution_SentinelOne.json, Solution_VMware Carbon Black Cloud.json, mainTemplate.json)