You are here:
Prepare Your Microsoft Exchange Server for Lightning Sync
To set up Lightning Sync using the service account connection method, enable these settings on your Microsoft® Exchange server: Exchange Web Services, Exchange Autodiscover Service, and Basic or NTLM authentication.
Required Editions
| Available to sync records from: Salesforce Classic, Lightning Experience, and the Salesforce mobile app |
| Available to set up from: Salesforce Classic and Lightning Experience |
| Available in: Professional, Enterprise, Performance, Unlimited, and Developer Editions with Sales Cloud, Service Cloud, and Lightning Platform |
Starting in Winter ‘21, Lightning Sync isn’t available to new Salesforce customers. Use Einstein Activity Capture to sync events, contacts, and emails between your connected account and Salesforce.
If you have Lightning Sync, use the migration tool to move to Einstein Activity Capture before Lightning Sync retires in April 2027.
If you use Lightning Sync with Microsoft Office 365 and Exchange Web Service (EWS) as your authentication method, complete your migration by August 2026 to avoid service disruption. In October 2026, Microsoft retires EWS for Microsoft 365 and replaces it with Microsoft Graph API. After migrating to Einstein Activity Capture, upgrade to the Microsoft Graph authentication method. See Upgrade Microsoft Office 365 Authentication Method to Microsoft Graph in Einstein Activity Capture.
This change affects all orgs except those using Government Cloud.
Steps vary depending on the version of Microsoft® Exchange your company uses. For help preparing your Exchange server, visit Microsoft’s support website, search for the keywords mentioned here, and follow the instructions intended for your Exchange version.
Enable these settings on your Exchange server.
-
Enable Exchange Web Services (EWS) on an SSL connection.
- Make sure that your Exchange server has a signed certificate from one of the Salesforce-approved Certificate Authorities.
- If your organization has configured a firewall, allow an inbound connection to your Exchange client access server on port 443.
- Enable Exchange Autodiscover Service.
- Enable Basic or NTLM authentication on your Exchange server and on your Autodiscover server. If Basic and NTLM are enabled, Lightning Sync gives connection preference to Basic.

