Microsoft Updating Salesforce Outlook Integration 2024/2025

This article explains the two key migration milestones M365 admins need to track, the recommended Admin Consent Flow that simplifies the migration for end users, and the banner message users will see during this transition.

Official Microsoft Documentation

Microsoft refers to this change as Nested App Authentication, or NAA. Refer to the official Microsoft documentation, available here, for more information, including timelines based on which update channel(s) your organization is using. While we encourage customers to implement these changes immediately, any questions about the exact timing of the milestones below should be directed to your M365 admin.

Key Milestones

When reviewing Microsoft's documentation, there are two key milestones to be mindful of:

• The date when Microsoft turns off Exchange Online tokens for all tenants. At this point, an admin can re-enable Exchange tokens for a tenant or a specific add-in.
• The date when Microsoft removes the option to re-enable Exchange tokens. At this point, if an admin has not taken the actions outlined in this article, users may no longer be able to access the integration.

Recommended Action: Admin Consent Flow

We strongly suggest that M365 admins use the Admin Consent Flow, which automates the scope authorization process for all users in an account's tenant so individual users don't have to manually authorize the integration after Microsoft rolls out these changes. M365 admins can use this link to initiate the Admin Consent Flow. This link must be used by an M365 admin.

• While not required, this step makes the migration more seamless for end users and avoids confusion that can come from prompting a user to authenticate the application.
• This link, along with instructions for M365 admins, can also be found on the "Outlook Integration and Sync" page in Setup.

Banner Message Behavior

All users are notified of these changes by a banner message that reads: "Upcoming Microsoft changes might block access to this application. To avoid losing access to your Outlook add-in, notify your Salesforce admin about this message."

• There is no way to disable this banner message - it displays for all users.
• If a user dismisses the message, it will not reappear.
• Once a user is no longer using legacy tokens, the message is suppressed entirely.