MC1310680 – M365 Change Digest

One-line summary

New Outlook for Windows now supports LDAP directories for S/MIME certificate lookup, allowing admins and users to configure LDAP sources for secure email encryption with external partners.

Similar updates

Details

RoadmapIds

518287

Summary

New Outlook for Windows supports LDAP directories for S/MIME certificate lookup, enabling secure encrypted email with external partners. Admins configure LDAP via Exchange Online PowerShell; users add directories in Outlook settings. Rollout starts late May 2026 worldwide, early June in GCC. Feature enabled by default, no authentication supported.

Platforms

Desktop

Body (from Message Center)

Updated May 21, 2026: We have updated the content. Thank you for your patience.

[Introduction]

New Outlook for Windows now supports Lightweight Directory Access Protocol (LDAP) directories for S/MIME certificate lookup. This enables tenants to configure LDAP directories for their organization as well as enabling users to configure LDAP directories themselves. Once configured, users can find recipients’ public encryption certificates from the directories when sending encrypted email, improving secure collaboration with external partners. This is especially valuable for tenants who collaborate with external partners and rely on public/partner LDAP directories to store public S/MIME certificates of users.

This message is associated with Microsoft 365 Roadmap ID 518287.

[When this will happen:]

General Availability (Worldwide): We will begin rolling out in late May 2026 and expect to complete by late May 2026.
General Availability (GCC): We will begin rolling out in early June 2026 and expect to complete by late June 2026.

[How this affects your organization:]

Who is affected:

Organizations that use S/MIME encryption with external recipients whose public certificates are hosted in third-party LDAP directories
Admins managing Exchange Online

What will happen:

Admins can configure LDAP directories using Exchange Online PowerShell.
Users can add LDAP directories in Settings > Mail > S/MIME in new Outlook.
When composing an S/MIME encrypted email, users can select recipients from the LDAP directory via the To field. This will directly enable Outlook to retrieve the certificate from the selected LDAP directory. If users add a recipient directly to the 'To list', Outlook will scan all available certificate sources, including the configured LDAP directories.
LDAP endpoints must not require authentication, as authentication is not currently supported.

Screenshot: “Add LDAP directory” option in Settings > Mail > S/MIME and LDAP recipient picker in the To field during message composition:

Add LDAP directory settings in new Outlook.

Feature is enabled by default once available.
No impact to:
- Classic Outlook for Windows users
- Organizations not using LDAP for S/MIME certificate discovery

[What you can do to prepare:]

No action is required to enable this feature
If your organization uses LDAP for S/MIME certificates:
- Identify LDAP directory endpoints used by your organization
- Run the Add-LdapDirectory cmdlet to register a new directory:
- Configure directories using Exchange Online PowerShell (Add-LdapDirectory).
- Ensure LDAP endpoints do not require authentication.
- Communicate guidance to users transitioning to new Outlook: Set up Outlook to use S/MIME encryption | Microsoft Support.

Learn more: Configure S/MIME in Exchange Online | Microsoft Learn (will be updated before we complete rollout)

[Compliance considerations:]

No compliance considerations identified, review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-05-20T00:00:00Z",
    "ai_actions": [
      "Identify relevant LDAP endpoints",
      "Register LDAP directories via Exchange Online PowerShell",
      "Ensure LDAP endpoints do not require authentication",
      "Inform users about LDAP S/MIME setup in new Outlook"
    ],
    "ai_master_tags": [
      "User",
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "New Outlook for Windows now supports LDAP directories for S/MIME certificate lookup, allowing admins and users to configure LDAP sources for secure email encryption with external partners.",
    "ai_topics": [
      "Exchange",
      "Outlook"
    ],
    "category": "stayInformed",
    "details_map": {
      "Platforms": "Desktop",
      "RoadmapIds": "518287",
      "Summary": "New Outlook for Windows supports LDAP directories for S/MIME certificate lookup, enabling secure encrypted email with external partners. Admins configure LDAP via Exchange Online PowerShell; users add directories in Outlook settings. Rollout starts late May 2026 worldwide, early June in GCC. Feature enabled by default, no authentication supported."
    },
    "id": "MC1310680",
    "importance": 3,
    "is_major_change": false,
    "last_modified": "2026-05-21T20:28:39Z",
    "ms_products": [
      "Exchange"
    ],
    "platforms": "Desktop",
    "roadmap_ids": [
      "518287"
    ],
    "services": [
      "Exchange Online"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "User impact",
      "Admin impact"
    ],
    "title": "(Updated) New Outlook for Windows: LDAP support for S/MIME certificate lookup"
  }
}