MC1189663 – (Updated) Retirement of external access token for actionable messages – moving to Microsoft Entra authentication

Outlook logo

check before: 2026-03-30

Product:

Entra, Microsoft 365 Apps, Microsoft 365 Groups, Outlook

Platform:

Online, World tenant

Status:

Change type:

Admin impact, Retirement, Updated message

Links:

Details:

Summary:
External access tokens for actionable messages will be retired by May 15, 2026, replaced by Microsoft Entra authentication to enhance security. Organizations must update integrations before this date, as messages using legacy tokens will fail. The phase-out completes by June 8, 2026.

Details:
Updated May 21, 2026: Phasing out to Legacy Auth Token (EAT) has been initiated and will complete by June 8th 2026. Thank you for your patience.
[Introduction]
We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages.

[When this will happen]
This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-11-25

updated:
2026-05-22

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Failure of Actionable Messages
Actionable messages relying on external access tokens will fail, disrupting workflows and communication.
   - roles: IT Administrators, End Users
   - references: https://learn.microsoft.com/outlook/actionable-messages/

Increased Support Requests
Users may experience issues with actionable messages, leading to an increase in support requests and user frustration.
   - roles: Help Desk Staff, End Users
   - references: https://learn.microsoft.com/outlook/actionable-messages/

Integration Downtime
Organizations that do not update integrations may face downtime for actionable message features, impacting productivity.
   - roles: IT Administrators, Business Analysts
   - references: https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages

Security Vulnerabilities
Continuing to use legacy tokens post-retirement may expose the organization to security risks and compliance issues.
   - roles: Security Officers, IT Administrators
   - references: https://learn.microsoft.com/outlook/actionable-messages/

Training and Adaptation Needs
Users and administrators will require training on the new Microsoft Entra authentication, leading to potential delays in adoption.
   - roles: Training Coordinators, End Users
   - references: https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages

Configutation Options**

XXXXXXX ... paid membership only

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



change history

DatePropertyoldnew
2026-05-22MC Last Updated03/24/2026 17:15:492026-05-21T19:04:16Z
2026-05-22MC MessagesUpdated March 24, 2026: We have updated the timeline. Thank you for your patience.
[Introduction]
We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages.

[When this will happen]
This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported.
Updated May 21, 2026: Phasing out to Legacy Auth Token (EAT) has been initiated and will complete by June 8th 2026. Thank you for your patience.
[Introduction]
We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages.

[When this will happen]
This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported.
2026-05-22MC End Time06/15/2026 09:00:002026-07-15T09:00:00Z
2026-05-22MC SummaryExternal access tokens for actionable messages will be retired on May 15, 2026, requiring organizations to switch to Microsoft Entra authentication. This change enhances security and affects all integrations using actionable messages with external tokens, which will fail after the deadline. Organizations should update their implementations accordingly.External access tokens for actionable messages will be retired by May 15, 2026, replaced by Microsoft Entra authentication to enhance security. Organizations must update integrations before this date, as messages using legacy tokens will fail. The phase-out completes by June 8, 2026.
2026-03-25MC prepareReview all actionable message implementations in your organization.
Update integrations to use Microsoft Entra authentication before March 31, 2026.
Learn more:
Actionable messages in Outlook and Office 365 Groups
Enable Entra token for Actionable messages
[Compliance considerations]
No compliance considerations identified, review as appropriate for your organization.
https://learn.microsoft.com/outlook/actionable-messages/
https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages
Review all actionable message implementations in your organization.
Update integrations to use Microsoft Entra authentication before May 15, 2026.
Learn more:
Actionable messages in Outlook and Office 365 Groups
Enable Entra token for Actionable messages
[Compliance considerations]
No compliance considerations identified, review as appropriate for your organization.
https://learn.microsoft.com/outlook/actionable-messages/
https://learn.microsoft.com/outlook/actionable-messages/enable-entra-token-for-actionable-messages
2026-03-25MC MessageTagNamesAdmin impact, RetirementUpdated message, Admin impact, Retirement
2026-03-25MC SummaryExternal access tokens for actionable messages will be retired by March 31, 2026, requiring organizations to switch to Microsoft Entra authentication. This change enhances security and compliance. Organizations should review and update their actionable message integrations before the deadline to avoid failures.External access tokens for actionable messages will be retired on May 15, 2026, requiring organizations to switch to Microsoft Entra authentication. This change enhances security and affects all integrations using actionable messages with external tokens, which will fail after the deadline. Organizations should update their implementations accordingly.
2026-03-25MC Last Updated11/25/2025 01:06:042026-03-24T17:15:49Z
2026-03-25MC Messages[Introduction]
We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages.

[When this will happen]
This change takes effect on March 31, 2026. After this date, external access tokens will no longer be supported.
Updated March 24, 2026: We have updated the timeline. Thank you for your patience.
[Introduction]
We're retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages.

[When this will happen]
This change takes effect on May 15, 2026. After this date, external access tokens will no longer be supported.
2026-03-25MC How AffectWho is affected:
Organizations using actionable messages that currently rely on external access tokens.
What will happen:
Actionable messages that depend on external access tokens will fail after March 31, 2026.
All integrations and workflows using actionable messages must adopt Microsoft Entra authentication.
This change improves security posture by leveraging Entra's identity and access management capabilities.
Who is affected:
Organizations using actionable messages that currently rely on external access tokens.
What will happen:
Actionable messages that depend on external access tokens will fail after May 15, 2026.
All integrations and workflows using actionable messages must adopt Microsoft Entra authentication.
This change improves security posture by leveraging Entra's identity and access management capabilities.
2026-03-25MC TitleRetirement of external access token for actionable messages – moving to Microsoft Entra authentication(Updated) Retirement of external access token for actionable messages – moving to Microsoft Entra authentication
2026-03-25MC End Time05/01/2026 09:00:002026-06-15T09:00:00Z

Last updated 4 weeks ago ago

Leave a Reply

Share to MS Teams

Login to your account

Welcome Back, We Missed You!