Published Nov 27, 2023
Azure ACS in Microsoft 365 will retire on April 2, 2026. New tenants cannot use Azure ACS starting November 1, 2024. Organizations should transition to Microsoft Entra ID for SharePoint Online customizations. Admins should notify users, update training, and use provided tools and guidance for migration.
Updated June 2, 2025: This update serves as a reminder that Azure ACS in Microsoft 365 will retire and stop working in 10 months from now (April 2, 2026).
Since the first use of Azure Access Control Services (ACS) by SharePoint in 2013, Microsoft has evolved the authorization and authentication options for SharePoint Online via Microsoft Entra ID (a.k.a. Azure AD). Using Microsoft Entra ID as auth platform for your SharePoint Online customizations will provide your applications the most secure, compliant and future proof model. With our continued investment in Microsoft Entra ID, Microsoft is retiring the use of Azure ACS as auth platform for SharePoint Online.
Key Points:
How this will affect your organization
If your organization still uses Azure ACS to grant custom developed or third party applications access to SharePoint Online, they will no longer have access after April 2nd, 2026. We recommend customers to update their customizations to use Microsoft Entra ID and ask their solution vendors to do the same.
What you need to do to prepare
You will want to notify your Azure ACS users and developers. Update your user training and prepare your help desk.
For admins
Learn more