MC693863 – (Updated) Azure ACS retirement in Microsoft 365

Product:

Azure Active Directory, Entra, Entra ID, Microsoft 365 Apps, SharePoint

Platform:

Developer, Online, World tenant

Status:

Change type:

Admin impact, Retirement, Updated message, User impact

Links:

MC898388

Details:

Summary:
Azure ACS will retire on April 2, 2026, affecting SharePoint Online customizations. Microsoft recommends transitioning to Microsoft Entra ID for authorization. Key dates include November 1, 2024, for new tenants and April 2, 2026, for existing tenants. Organizations should prepare by updating training and using the Microsoft 365 Assessment tool.

Details:
Updated April 12, 2024: This update serves as a reminder regarding the upcoming retirement scheduled for April 2, 2026.
Since the first use of Azure ACS (Access Control Services) by SharePoint in 2013, Microsoft has evolved the authorization and authentication options for SharePoint Online via Microsoft Entra ID (a.k.a. Azure AD). Using Microsoft Entra ID as auth platform for your SharePoint Online customizations will provide your applications the most secure, compliant and future proof model. With our continued investment in Microsoft Entra ID, Microsoft is retiring the use of Azure ACS as auth platform for SharePoint Online.
[Key Points:]
Major: Retirement
Timeline:
Starting November 1st, 2024, new tenants will not be able use Azure ACS.
Starting April 2, 2026, Microsoft will remove the ability use SharePoint ACS for existing tenants.
Action: Review and assess impact

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2023-11-28

updated:
2024-04-13

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

additional Info URL

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Impact on IT Operations
- Disruption in access to SharePoint Online customizations for applications relying on Azure ACS post-retirement.
- Roles impacted: IT Operations Managers, System Administrators
- Reference: [Microsoft Support Update](https://aka.ms/retirement/acs/guidance)

- Impact on IT Services
- Need for migration to Microsoft Entra ID, which may require downtime or service interruptions during the transition period.
- Roles impacted: Service Delivery Managers, Application Support Teams
- Reference: [Microsoft Entra ID Overview](https://learn.microsoft.com/en-us/azure/active-directory/develop/)

- Impact on IT Users
- Users may experience loss of functionality or access to custom applications integrated with SharePoint Online if not transitioned in time.
- Roles impacted: End Users, Business Analysts
- Reference: [Microsoft 365 Assessment Tool](https://aka.ms/assessment/addinsacs)

- Impact on IT Administrators
- Increased workload for administrators to assess current Azure ACS usage, plan migration strategies, and update training materials.
- Roles impacted: IT Administrators, Training Coordinators
- Reference: [Migration Guidance](https://learn.microsoft.com/en-us/azure/active-directory/develop/)

- Dependencies and Interdependencies
- Custom applications and third-party solutions that depend on Azure ACS will need to be evaluated and potentially re-engineered to work with Microsoft Entra ID, affecting project timelines and resource allocation.
- Roles impacted: Project Managers, Solution Architects
- Reference: [Transitioning to Microsoft Entra ID](https://aka.ms/retirement/acs/guidance)

Opportunities**

- Transition to Microsoft Entra ID
- Opportunity to enhance security and compliance by migrating from Azure ACS to Microsoft Entra ID for SharePoint Online customizations.
- Roles benefiting: IT Security Team, SharePoint Developers, Compliance Officers.
- Reference: [Microsoft Entra ID Overview](https://learn.microsoft.com/en-us/azure/active-directory/develop/)

- Utilize Microsoft 365 Assessment Tool
- Leverage the Microsoft 365 Assessment tool to identify and assess the impact of Azure ACS usage across the organization, ensuring a smooth transition.
- Roles benefiting: IT Administrators, Help Desk Support, Project Managers.
- Reference: [Microsoft 365 Assessment Tool](https://aka.ms/assessment/addinsacs)

- Update User Training and Documentation
- Revise training materials and documentation to educate users and developers about the transition to Microsoft Entra ID, reducing potential confusion and support requests.
- Roles benefiting: Training Coordinators, Help Desk Support, End Users.
- Reference: [Training Resources for Microsoft Entra ID](https://learn.microsoft.com/en-us/azure/active-directory/develop/)

- Engage with Solution Vendors
- Collaborate with third-party solution vendors to ensure their applications are updated to support Microsoft Entra ID, minimizing disruptions in service.
- Roles benefiting: Vendor Management Team, IT Operations, Application Owners.
- Reference: [Vendor Guidance for Microsoft Entra ID](https://learn.microsoft.com/en-us/azure/active-directory/develop/)

- Optimize IT Operations through Automation
- Implement automation tools to streamline the migration process and ongoing management of Microsoft Entra ID, improving efficiency and reducing manual errors.
- Roles benefiting: IT Operations Team, System Administrators, DevOps Engineers.
- Reference: [Automation in Azure](https://learn.microsoft.com/en-us/azure/automation/automation-overview)

Potentional Risks**

XXXXXXX ... paid membership only