Microsoft Graph Authentication in Einstein Activity Capture

Authentication Levels

Einstein Activity Capture supports user-level, role-based access control, and application-level authentication methods for Microsoft 365. For details, see Microsoft Graph API.

Compare Authentication Methods

Comparison of authentication methods between Exchange Web Services (EWS) and Microsoft Graph API.

Note You can change the authentication method to RBAC OAuth from Application-level OAuth, after Einstein Activity Capture's authentication method is upgraded to Microsoft Graph. For more information, see Change Microsoft Office 365 Authentication Level in Einstein Activity Capture.

Impact on Other Areas

Changing the authentication method from EWS to Microsoft Graph impacts other areas.

Salesforce Inbox

• If Salesforce Inbox and Einstein Activity Capture are set up for Microsoft Office 365 with EWS authentication, upgrading either one to Microsoft Graph automatically upgrades the other.
• If Einstein Activity Capture isn't set up and you upgrade Salesforce Inbox to Microsoft Graph, any future setup of Einstein Activity Capture with Microsoft 365 uses Microsoft Graph automatically. See Upgrade Microsoft Office 365 Authentication Method to Microsoft Graph in Inbox

Lightning Sync

Lightning Sync configurations that use Microsoft Office 365 with EWS won't capture or sync data after EWS retires in October 2026. To avoid service disruption, complete both steps before August 2026.

1. Migrate from Lightning Sync to Einstein Activity Capture. See Move from Lightning Sync to Einstein Activity Capture.
2. Upgrade EWS authentication to Microsoft Graph.

Lead Nurturing Agent

Salesforce treats a Lead Nurturing Agent the same as a user with a user-level authentication. When you upgrade user-level authentication of Einstein Activity Capture or Inbox to Microsoft Graph, Salesforce shows a banner prompting Lead Nurturing Agent Managers to reconnect the agent's email account.

What to Expect When Upgrading to Microsoft Graph

Keep these considerations in mind when upgrading to Microsoft Graph.

• If your org is eligible for Microsoft Graph upgrade and you reset Einstein Activity Capture before upgrading, new Einstein Activity Capture configurations with Microsoft Office 365 automatically use Microsoft Graph API.
• If you upgrade Einstein Activity Capture and Inbox with User-Level OAuth to Microsoft Graph, banner messages notify your users to reconnect their Microsoft account. Einstein Activity Capture and Inbox continue to sync events and emails through EWS until users reconnect their individual accounts. After a user reconnects to their Microsoft account, their individual connection switches to Microsoft Graph.