{"id":6689,"date":"2018-04-03T00:00:00","date_gmt":"2018-04-03T07:00:00","guid":{"rendered":"http:\/\/officedevblogs.wpengine.com\/?p=49"},"modified":"2021-11-15T10:57:54","modified_gmt":"2021-11-15T18:57:54","slug":"impact-of-azure-access-control-deprecation-for-sharepoint-add-ins","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/impact-of-azure-access-control-deprecation-for-sharepoint-add-ins\/","title":{"rendered":"Impact of Azure Access Control retirement for SharePoint add-ins"},"content":{"rendered":"<div id=\"body-content\">\n<p>Azure Access Control (ACS), a service of Azure Active Directory (Azure AD), will be retired on November 7, 2018. SharePoint is using ACS in numerous areas, but these are not\u00a0impacted by this deprecation. All existing SharePoint add-in model registrations and related functionalities will continue to be supported also after this retirement. Azure has released following article on\u00a0the migration guidance, which was updated on April 2018 to include specific sections around SharePoint to avoid any confusion.<\/p>\n<ul>\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/active-directory-acs-migration\">Migrate from the Azure Access Control service<\/a><\/li>\n<\/ul>\n<p>Here&#8217;s the relevant information around the SharePoint from the <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/active-directory-acs-migration\">article<\/a>.<\/p>\n<h3 id=\"sharepoint-customers\" class=\"heading-with-anchor\">SharePoint customers<\/h3>\n<p>SharePoint 2013, 2016, and SharePoint Online customers have long used ACS for authentication purposes in the cloud, on-prem, and hybrid scenarios. Some SharePoint features and use cases will be affected by ACS retirement, while others will not. The below table summarizes migration guidance for some of the most popular SharePoint feature that leverage ACS:<\/p>\n<ul>\n<li>Authenticating users from Azure AD\n<ul>\n<li>Previously, Azure AD did not support SAML 1.1 tokens required by SharePoint for authentication, and ACS was used as an intermediary that made SharePoint compatible with Azure AD token formats. Now, you can\u00a0<a href=\"https:\/\/docs.microsoft.com\/Office365\/Enterprise\/using-azure-ad-for-sharepoint-server-authentication\" data-linktype=\"external\">connect SharePoint directly to Azure AD using token issuance policies<\/a>.<\/li>\n<\/ul>\n<\/li>\n<li><a href=\"https:\/\/technet.microsoft.com\/library\/jj219571(v=office.16).aspx\" data-linktype=\"external\">App authentication &amp; server-to-server authentication in SharePoint on-prem<\/a>\u00a0or\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/sharepoint\/dev\/sp-add-ins\/register-sharepoint-add-ins\">SharePoint Online<\/a> &#8211; SharePoint add-in registrations done through appregnew.aspx etc.\n<ul>\n<li>Not affected by ACS retirement; no changes necessary.<\/li>\n<\/ul>\n<\/li>\n<li><a href=\"https:\/\/docs.microsoft.com\/sharepoint\/dev\/sp-add-ins\/three-authorization-systems-for-sharepoint-add-ins\" data-linktype=\"external\">Low trust authorization for SharePoint add-ins (provider hosted and SharePoint hosted)<\/a>\n<ul>\n<li>Not affected by ACS retirement; no changes necessary.<\/li>\n<\/ul>\n<\/li>\n<li><a href=\"https:\/\/.msdn.microsoft.com\/spses\/2015\/09\/15\/cloud-hybrid-search-service-application\/\" data-linktype=\"external\">SharePoint cloud hybrid search<\/a>\n<ul>\n<li>Not affected by ACS retirement; no changes necessary.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<div class=\"table-scroll-wrapper\">\n<h2>Additional resources<\/h2>\n<p>See following resources on the\u00a0covered topics.<\/p>\n<ul>\n<li><a href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/time-to-migrate-off-access-control-service\/\">Time to migrate off Access Control Service<\/a>\u00a0&#8211; Azure Blog<\/li>\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/active-directory-acs-migration\">Migrate from the Azure Access Control Service<\/a>\u00a0&#8211; Azure docs<\/li>\n<\/ul>\n<\/div>\n<hr \/>\n<p><i><a href=\"https:\/\/twitter.com\/vesajuvonen\">Vesa Juvonen<\/a>, Senior Program Manager, SharePoint, Microsoft &#8211;\u00a03rd of\u00a0April 2018<\/i><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Azure Access Control (ACS), a service of Azure Active Directory (Azure AD), will be retired on November 7, 2018. SharePoint is using ACS in numerous areas,  but these are not\u00a0impacted by this deprecation. <\/p>\n","protected":false},"author":69217,"featured_media":25159,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[61],"class_list":["post-6689","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-365-developer","tag-azure"],"acf":[],"blog_post_summary":"<p>Azure Access Control (ACS), a service of Azure Active Directory (Azure AD), will be retired on November 7, 2018. SharePoint is using ACS in numerous areas,  but these are not\u00a0impacted by this deprecation. <\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/posts\/6689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/users\/69217"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/comments?post=6689"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/posts\/6689\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/media\/25159"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/media?parent=6689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/categories?post=6689"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/wp-json\/wp\/v2\/tags?post=6689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}