MC1120871 - Important Update: Teams Meeting Join URL Validation

Service

Microsoft Teams

Last Updated

Sep 11, 2025

Published Jul 24, 2025

Tag

Major change
Updated message
Feature update
User impact
Admin impact

Summary

Microsoft Teams will validate meeting join URLs starting September 30, 2025, to prevent altered or rewritten links from blocking access, affecting users of the old Teams calendar app. The new calendar app redirects safely without blocking. No admin action is needed for Safe Links users; third-party URL rewriting must exclude Teams links.

More information

Updated September 11, 2025: We have updated the timeline. Thank you for your patience.

What and Who

To enhance the security and integrity of Microsoft Teams meetings, we are introducing a new feature that validates Teams meeting join URLs. This update helps ensure that meeting links are not altered or rewritten by security products in ways that could render them unusable or flagged as malicious. This is applicable only when user Joins a meeting from Teams old calendar.

Rollout Schedule

  • Worldwide: September 30, 2025
  • GCC, GCC High, DoD: November 30, 2025

Impact on Your Organization

  • Who is affected:
    • Organizations that use security solutions to inspect or rewrite URLs, as well as users who join Microsoft Teams meetings through the Teams platform, will be affected by this update.

What will happen:

Old Teams Calendar App:

    • Microsoft Teams will validate join URLs to ensure they have not been modified.
    • If a join URL is rewritten or altered by a security product, it may be marked as malicious.
    • Users will be prevented from joining meetings if URLs are not in their original format.
    • This feature is enabled by default and does not require admin configuration.
    • Microsoft's advanced email security platform, including Safe Links (URL inspection/rewriting), will not be impacted by this update.
    • Safe Links Behavior:
      • Does not rewrite the URLs behind the “Join Teams meeting” or “Join” buttons.
      • Only rewrites URLs within the meeting invitation body.
      • Any temporary rewriting (if applied) is removed by Exchange Online upon send/receive.
    • Outlook Add-in Behavior
      • If meeting links are rewritten via Outlook add-ins during meeting creation, there is no impact.
    • Potential impact:
      • This change may affect third-party security services that rewrite both the body URLs and the “Join” button URLs.
    • Action required:
      • No action is needed for customers using Safe Links. There is no requirement to add Teams meeting URLs to the Safe Links “allowed list.”
      • For the customer using 3P solutions, they must ensure Teams join links are excluded from rewriting.
      • Compliance Considerations: No compliance considerations identified, review as appropriate for your organization.
    • Workaround: Switch to New calendar to unblock users from joining the Meeting.

    Platforms affected

    • Only Microsoft Teams affected, other platforms like outlook web and win32, outlook mac remain unaffected.