check before: 2026-03-30
Product:
Entra, Microsoft 365 Apps, Microsoft 365 Groups, Outlook
Platform:
Online, World tenant
Status:
Change type:
Admin impact, Retirement, Updated message
Links:
Details:
Summary:
External access tokens for actionable messages will be retired by May 15, 2026, replaced by Microsoft Entra authentication to enhance security. Organizations must update integrations before this date, as messages using legacy tokens will fail. The phase-out completes by June 8, 2026.
Details:
Updated May 21, 2026: Phasing out to Legacy Auth Token (EAT) has been initiated and will complete by June 8th 2026. Thank you for your patience.
[Introduction]
We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages.
[When this will happen]
This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-11-25
updated:
2026-05-22
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Failure of Actionable Messages
Actionable messages relying on external access tokens will fail, disrupting workflows and communication.
- roles: IT Administrators, End Users
- references: https://learn.microsoft.com/outlook/actionable-messages/
Increased Support Requests
Users may experience issues with actionable messages, leading to an increase in support requests and user frustration.
- roles: Help Desk Staff, End Users
- references: https://learn.microsoft.com/outlook/actionable-messages/
Integration Downtime
Organizations that do not update integrations may face downtime for actionable message features, impacting productivity.
- roles: IT Administrators, Business Analysts
- references: https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages
Security Vulnerabilities
Continuing to use legacy tokens post-retirement may expose the organization to security risks and compliance issues.
- roles: Security Officers, IT Administrators
- references: https://learn.microsoft.com/outlook/actionable-messages/
Training and Adaptation Needs
Users and administrators will require training on the new Microsoft Entra authentication, leading to potential delays in adoption.
- roles: Training Coordinators, End Users
- references: https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages
Configutation Options**
XXXXXXX ... paid membership only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2026-05-22 | MC Last Updated | 03/24/2026 17:15:49 | 2026-05-21T19:04:16Z |
| 2026-05-22 | MC Messages | Updated March 24, 2026: We have updated the timeline. Thank you for your patience.
[Introduction] We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages. [When this will happen] This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported. | Updated May 21, 2026: Phasing out to Legacy Auth Token (EAT) has been initiated and will complete by June 8th 2026. Thank you for your patience.
[Introduction] We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages. [When this will happen] This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported. |
| 2026-05-22 | MC End Time | 06/15/2026 09:00:00 | 2026-07-15T09:00:00Z |
| 2026-05-22 | MC Summary | External access tokens for actionable messages will be retired on May 15, 2026, requiring organizations to switch to Microsoft Entra authentication. This change enhances security and affects all integrations using actionable messages with external tokens, which will fail after the deadline. Organizations should update their implementations accordingly. | External access tokens for actionable messages will be retired by May 15, 2026, replaced by Microsoft Entra authentication to enhance security. Organizations must update integrations before this date, as messages using legacy tokens will fail. The phase-out completes by June 8, 2026. |
| 2026-03-25 | MC prepare | Review all actionable message implementations in your organization.
Update integrations to use Microsoft Entra authentication before March 31, 2026. Learn more: Actionable messages in Outlook and Office 365 Groups Enable Entra token for Actionable messages [Compliance considerations] No compliance considerations identified, review as appropriate for your organization. https://learn.microsoft.com/outlook/actionable-messages/ https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages | Review all actionable message implementations in your organization.
Update integrations to use Microsoft Entra authentication before May 15, 2026. Learn more: Actionable messages in Outlook and Office 365 Groups Enable Entra token for Actionable messages [Compliance considerations] No compliance considerations identified, review as appropriate for your organization. https://learn.microsoft.com/outlook/actionable-messages/ https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages |
| 2026-03-25 | MC MessageTagNames | Admin impact, Retirement | Updated message, Admin impact, Retirement |
| 2026-03-25 | MC Summary | External access tokens for actionable messages will be retired by March 31, 2026, requiring organizations to switch to Microsoft Entra authentication. This change enhances security and compliance. Organizations should review and update their actionable message integrations before the deadline to avoid failures. | External access tokens for actionable messages will be retired on May 15, 2026, requiring organizations to switch to Microsoft Entra authentication. This change enhances security and affects all integrations using actionable messages with external tokens, which will fail after the deadline. Organizations should update their implementations accordingly. |
| 2026-03-25 | MC Last Updated | 11/25/2025 01:06:04 | 2026-03-24T17:15:49Z |
| 2026-03-25 | MC Messages | [Introduction]
We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages. [When this will happen] This change takes effect on March 31, 2026. After this date, external access tokens will no longer be supported. | Updated March 24, 2026: We have updated the timeline. Thank you for your patience.
[Introduction] We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages. [When this will happen] This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported. |
| 2026-03-25 | MC How Affect | Who is affected:
Organizations using actionable messages that currently rely on external access tokens. What will happen: Actionable messages that depend on external access tokens will fail after March 31, 2026. All integrations and workflows using actionable messages must adopt Microsoft Entra authentication. This change improves security posture by leveraging Entra's identity and access management capabilities. | Who is affected:
Organizations using actionable messages that currently rely on external access tokens. What will happen: Actionable messages that depend on external access tokens will fail after May 15, 2026. All integrations and workflows using actionable messages must adopt Microsoft Entra authentication. This change improves security posture by leveraging Entra's identity and access management capabilities. |
| 2026-03-25 | MC Title | Retirement of external access token for actionable messages – moving to Microsoft Entra authentication | (Updated) Retirement of external access token for actionable messages – moving to Microsoft Entra authentication |
| 2026-03-25 | MC End Time | 05/01/2026 09:00:00 | 2026-06-15T09:00:00Z |
Last updated 4 weeks ago ago