MC1028318 - Microsoft SharePoint Online Management Shell will replace IDCRL authentication protocol with OAuth

Service

SharePoint Online

Published

Mar 11, 2025

Tag

Feature update
User impact
Admin impact

Summary

Starting March 28, 2025, Microsoft SharePoint Online Management Shell will replace the IDCRL authentication protocol with OAuth. Admins should install the updated version from the Microsoft Download Center. No admin action is required, but reviewing current configurations and notifying users is recommended.

More information

Starting with the March 28, 2025 release of the Microsoft SharePoint Online Management Shell (SPO Admin PowerShell), we will replace the IDCRL (Identity Client Run Time Library) Authentication protocol with OAuth (modern authentication protocol). This update is part of our ongoing efforts to enhance security and adopt modern authentication practices. To enhance your security, please install the March 28, 2025 or later version of SharePoint Online Management Shell from Download SharePoint Online Management Shell from Official Microsoft Download Center.

When this will happen:

Starting with the March 28, 2025 version of SharePoint Online Management Shell, requests using the Connect-SPOService cmdlet will be automatically authenticated with the new OAuth protocol. This update does not change existing admin flows and no other admin action is required. We will also display a warning message about this change in the March 28, 2025 or later releases of SharePoint Online Management Shell.

How this will affect your organization:

How to check your current version of SharePoint Online Management Shell (SPO Admin PowerShell)

Method 1: Using PowerShell

  1. Open PowerShell.
  2. Run this command: Get-Module -Name Microsoft.Online.SharePoint.PowerShell -ListAvailable | Select-Object Name, Version
  3. This will display the installed version of the SharePoint Online Management Shell module.

Method 2: Using Installed Programs List

  1. Open the Control panel in Windows.
  2. Go to Programs and Features.
  3. Look for Microsoft SharePoint Online Management Shell in the installed programs list.
  4. The version number will be displayed there.

This warning message in SharePoint Online Management Shell informs admins that we have replaced IDCRL with OAuth:

admin message

What you need to do to prepare:

This rollout will happen automatically by the specified dates with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.

Please install the March 28, 2025 or later version of SharePoint Online Management Shell from Download SharePoint Online Management Shell from Official Microsoft Download Center.

Learn more: Can't connect to SharePoint Online - SharePoint | Microsoft Learn (will be updated before rollout)