{"id":22548,"date":"2024-08-14T10:34:06","date_gmt":"2024-08-14T17:34:06","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/?p=22548"},"modified":"2024-08-14T10:34:06","modified_gmt":"2024-08-14T17:34:06","slug":"updates-on-deprecating-legacy-exchange-online-tokens-for-outlook-add-ins","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/updates-on-deprecating-legacy-exchange-online-tokens-for-outlook-add-ins\/","title":{"rendered":"Updates on deprecating legacy Exchange Online tokens for Outlook add-ins"},"content":{"rendered":"

We want to share an update on the timeline and plans for deprecating legacy Exchange Online user identity tokens<\/a> and callback tokens<\/a>. If your Outlook add-in uses legacy tokens to make calls to Exchange, then this information applies to you.<\/p>\n

On April 9, 2024 the Office Platform Team made two major announcements:<\/p>\n

    \n
  1. We launched the public preview of Nested App Authentication (NAA), which provides simple authentication and top tier identity protection through APIs designed specifically for add-ins in Office hosts.<\/li>\n
  2. We announced that legacy Exchange <\/strong>user identity tokens<\/strong><\/a>\u00a0and <\/strong>callback tokens<\/strong><\/a>\u00a0will be turned off by default for all Exchange Online tenants <\/strong>as part of Microsoft\u2019s Secure Future Initiative<\/a>\u00a0to protect organizations in the current threat landscape. If your add-in uses legacy tokens to make calls to Exchange, you need to migrate from Exchange tokens to using NAA and Entra ID tokens as soon as possible.<\/li>\n<\/ol>\n

    Timeline for turning off legacy Exchange tokens<\/h2>\n

    In April, we announced that Exchange tokens will be turned off by default for all tenants in October 2024. This has been updated and you should have more time to move your Outlook add-ins from Exchange tokens to NAA. The following tables list the key milestones based on which channel customers are using. Note that the general availability (GA) date for NAA will vary based on channel. We’ll provide tooling for administrators to reenable Exchange tokens for tenants and add-ins if those add-ins are not yet migrated to NAA.<\/p>\n

    Current Channel<\/h3>\n\n\n\n\n\n\n\n
    Date<\/strong><\/td>\nAction<\/strong><\/td>\n<\/tr>\n
    October 2024<\/td>\nNAA is GA for Current Channel.<\/p>\n

    Exchange online tokens are turned off by default for new tenants and existing tenants known not to be using Exchange tokens.<\/p>\n

    The administrator can choose to reenable Exchange tokens on tenants or add-ins as needed.<\/td>\n<\/tr>\n

    January 2025<\/td>\nExchange online tokens are turned off by default for all tenants<\/strong>.<\/p>\n

    The administrator can choose to reenable Exchange tokens on tenants and add-ins as needed.<\/td>\n<\/tr>\n

    June 2025<\/td>\nThe ability for the administrator to reenable Exchange online tokens is removed. If a tenant or add-in needs Exchange tokens reenabled, the administrator must contact Microsoft.<\/td>\n<\/tr>\n
    October 2025<\/td>\nExchange online tokens are turned off for all tenants and add-ins, including any that were reenabled.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    <\/h3>\n

    Monthly Enterprise Channel<\/h3>\n\n\n\n\n\n\n\n
    Date<\/strong><\/td>\nAction<\/strong><\/td>\n<\/tr>\n
    November 2024<\/td>\nNAA is GA for Monthly Enterprise Channel.<\/p>\n

    Exchange online tokens are turned off by default for new tenants and existing tenants known not to be using Exchange tokens.<\/p>\n

    The administrator can choose to reenable Exchange tokens on tenants or add-ins as needed.<\/td>\n<\/tr>\n

    February 2025<\/td>\nExchange online tokens are turned off by default for all tenants<\/strong>.<\/p>\n

    The administrator can choose to reenable Exchange tokens on tenants and add-ins as needed.<\/td>\n<\/tr>\n

    June 2025<\/td>\nThe ability for the administrator to reenable Exchange online tokens is removed. If a tenant or add-in needs Exchange tokens reenabled, the administrator must contact Microsoft.<\/td>\n<\/tr>\n
    October 2025<\/td>\nExchange online tokens are turned off for all tenants and add-ins, including any that were reenabled.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

    Semi-annual Channel<\/h3>\n\n\n\n\n\n\n
    Date<\/td>\nAction<\/td>\n<\/tr>\n
    January 2025<\/td>\nNAA is GA for Semi-annual Channel.<\/p>\n

    Exchange online tokens are turned off by default for all tenants<\/strong>.<\/p>\n

    The administrator can choose to reenable Exchange tokens on tenants and add-ins as needed.<\/td>\n<\/tr>\n

    June 2025<\/td>\nThe ability for the administrator to reenable Exchange online tokens is removed. If a tenant or add-in needs Exchange tokens reenabled, the administrator must contact Microsoft.<\/td>\n<\/tr>\n
    October 2025<\/td>\nExchange online tokens are turned off for all tenants and add-ins, including any that were reenabled.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

    Semi-annual Channel Extended<\/h3>\n\n\n\n\n\n
    Date<\/td>\nAction<\/td>\n<\/tr>\n
    June 2025<\/td>\nNAA is GA for Semi-annual Channel Extended.<\/p>\n

    The ability for the administrator to reenable Exchange online tokens is removed. If a tenant or add-in needs Exchange tokens reenabled, the administrator must contact Microsoft.<\/td>\n<\/tr>\n

    October 2025<\/td>\nExchange online tokens are turned off for all tenants and add-ins, including any that were reenabled.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Next steps for developers<\/h2>\n

    Get started migrating your add-in from Exchange tokens to NAA. Refer to the original blog post: New Nested App Authentication for Office Add-ins: Legacy Exchange tokens off by default in October 2024 (microsoft.com)<\/a>. It includes the following information:<\/p>\n