Back to latest version

MC1189663 - Retirement of external access token for actionable messages – moving to Microsoft Entra authentication

Message Center

Metadata at Nov 25, 2025

Published

Nov 25, 2025

Service

Microsoft 365 apps

Tag

Major change
Admin impact
Retirement

Act by

Mar 30, 2026

Metadata changes

Tags
Admin impact, Retirement, Updated messageAdmin impact, Retirement
End date
Jun 15, 2026May 1, 2026

Body changes

removed textadded text

Updated March 24, 2026: We have updated the timeline. Thank you for your patience. 

Introduction

We’re retiring the use of external access tokens for actionable messages and transitioning to Microsoft Entra-based authentication. This update enhances security and aligns with modern identity standards, providing a more robust and compliant experience for actionable messages.

When this will happen

This change takes effect on May 15,March 31, 2026. After this date, external access tokens will no longer be supported.

How this affects your organization

Who is affected:

Organizations using actionable messages that currently rely on external access tokens.

What will happen:

  • Actionable messages that depend on external access tokens will fail after May 15,March 31, 2026.
  • All integrations and workflows using actionable messages must adopt Microsoft Entra authentication.
  • This change improves security posture by leveraging Entra’s identity and access management capabilities.
What you can do to prepare
  • Review all actionable message implementations in your organization.
  • Update integrations to use Microsoft Entra authentication before May 15,March 31, 2026.

Learn more:

Compliance considerations

No compliance considerations identified, review as appropriate for your organization.