Business today doesn’t happen in silos. Workflows span across multiple apps, from email to CRM to collaboration tools. Outlook add-ins play a key role in keeping teams productive, but they too often rely upon legacy authentication methods that weren’t designed for this new, interconnected world. Microsoft is taking steps to champion security by replacing traditional Exchange Online tokens with Nested App Authentication (NAA). Thanks to building on top of Microsoft Entra ID, NAA supports modern authentication protocols and zero-trust policies while providing a streamlined single sign-on experience.
To help ensure a seamless transition, the App Assure team has been actively working with software vendors, supporting their efforts to update Outlook add-ins and ensure these remain functional and secure without interrupting customers’ experiences.
App Assure helps customers and partners embrace change
Security is at the forefront of everything we do, but implementing change at scale requires collaboration. The App Assure team has been working directly with software vendors to help them adopt NAA by providing guidance, troubleshooting support, and ensuring that add-ins maintain full functionality for customers.
For many organizations, Outlook add-ins are business-critical tools that integrate email with CRM, project management, and collaboration platforms. If the impacts of this transition aren’t managed properly, businesses could face disruptions in daily workflows. App Assure’s role is to make sure this doesn’t happen. By working proactively with vendors, we’re ensuring that their apps are not only secure but also continue to deliver value to customers.
How industry partners are adopting NAA
Out of 98 Independent Software Vendors (ISVs) we’ve worked with to date, one example of this collaboration is iEnterprises, a software company that builds integrations between Outlook, Gmail, and leading CRM platforms. Before moving to NAA, iEnterprises relied on legacy authentication methods that required frequent credential prompts, creating unnecessary friction for users.
When App Assure reached out about the transition, iEnterprises quickly took action. “The new APIs will enhance functionality by allowing our users to have a more secure connection that does not always prompt for reauthentication. This makes the add-in easy to use and seamless within their normal workflow,” said John Carini, CEO of iEnterprises.
The App Assure team worked alongside iEnterprises, offering direct support and validation to ensure the migration was successful. Thanks to this collaboration, iEnterprises was able to transition without service disruption and deliver an improved, more secure experience for their customers.
iEnterprises is just one example of the many technology vendors the App Assure team has supported in successfully transitioning to NAA. Others include:
Strengthening security with no interruptions to workflows
At Microsoft, we know that change―even when it’s necessary for security―can be disruptive. That’s why our App Assure team is working side by side with software vendors to make sure the transition to NAA is seamless for businesses and users alike. Our goal is to ensure Outlook add-ins remain the productivity tools customers rely on, now with even greater protection at their core.
Many of our trusted industry partners have already made the shift, ensuring their add-ins remain fully functional and secure. By proactively engaging with App Assure, vendors can avoid last-minute disruptions and provide their customers with the best possible experience.
The shift to NAA is part of the Secure Future Initiative and will take full effect in October 2025, when legacy Exchange Online tokens will be permanently retired. If you're a software vendor looking to migrate or a customer who wants to ensure the compatibility of your favorite add-ins, our team is ready to help. Reach out to achelp@microsoft.com. We’re here for you.
Supporting resources
Microsoft