Blog Post

Exchange Team Blog
1 MIN READ

Update on nested app authentication and deprecation of Exchange Online legacy tokens

Nino_Bilic's avatar
Nino_Bilic
Icon for Microsoft rankMicrosoft
Dec 03, 2024
A quick note to our audience that there is a new blog post related to Nested App Authentication (NAA) and deprecation of legacy tokens for Outlook add-ins, that was published today: Update on neste...
Published Dec 03, 2024
Version 1.0
announcements
community
outlook
security
Pankaj_Messaging_Specialist's avatar
Pankaj_Messaging_Specialist
Brass Contributor
Jan 29, 2025

Nino_BilicI am going to turn on Legacy Exchange tokens, I hope there would be no End User impact after enabling the legacy tokens, or any pop-up to the end users outlook?

Please review and confirm.

  • Nino_Bilic's avatar
    Nino_Bilic
    Icon for Microsoft rankMicrosoft
    Jan 29, 2025

    I think you mean you will turn off Legacy tokens for your tenant?

    Note that even after you turn them off, already issued tokens will keep working until they expire; I think ~24 hours at least. But other than that - if you turn off legacy tokens, if there are Outlook add-ins that use them, they will break also. Assuming you are doing this because you did not find any, in which case it should have no impact...

    • Pankaj_Messaging_Specialist's avatar
      Pankaj_Messaging_Specialist
      Brass Contributor
      Jan 29, 2025

      Thanks, no customer asked me to turn it on for Legacy exchange tokens, I ran two command and found few add-ins.


      PS C:\Users\TEMP.ARCOSA.118> Get-OrganizationAddIn | Select-Object -Property DisplayName, AssetID, ProductID, Provider
      me

      DisplayName     AssetId     ProductId                            ProviderName
      -----------     -------     ---------                            ------------
      Report Phishing WA200002469 3f32746a-0586-4c54-b8ce-d3b611c5b6c8
      Report Phish                6bbc462b-b03e-4837-87ab-c061a18ec62c


      PS C:\Users\TEMP.ARCOSA.118> Get-App -OrganizationApp | ft DisplayName, MarketplaceAssetID, AppId, ProviderName

      DisplayName        MarketplaceAssetID AppId                                ProviderName
      -----------        ------------------ -----                                ------------
      Viva Insights                         fe93bfe1-7947-460a-a5e0-7a5906b51360 Microsoft
      Viva Insights                         9fd38622-d9b4-4401-b1b9-1ce14c5e435a Microsoft
      Action Items                          f60b8ac7-c3e3-4e42-8dad-e4e1fea59ff7 Microsoft
      Bing Maps                             7a774f0c-7a6f-11e0-85ad-07fb4824019b Microsoft
      My Templates                          a216ceed-7791-4635-a752-5a4ac0a5eb93 Microsoft
      Suggested Meetings                    bc13b9d0-5ba2-446a-956b-c583bdc94d5e Microsoft
      Unsubscribe                           d39dee0e-fdc3-4015-af8d-94d4d49294b3 Microsoft

      These are the tokens, I am getting while running and not sure if they are using legacy exchange tokens,

      Report Phishing WA200002469 3f32746a-0586-4c54-b8ce-d3b611c5b6c8 - This one I see inthe spreadsheet provided by Microsoft.

      Report Phish                6bbc462b-b03e-4837-87ab-c061a18ec62c - this is third party add-in and do not see in spreadsheet.

       

      can you guide me if I turn it on Legacy, will there be any issue to the end user, any pop-up to the End Users outlook?