MC693863 – M365 Change Digest

One-line summary

Azure ACS will retire for SharePoint Online on April 2, 2026; update custom apps and integrations to use Microsoft Entra ID to maintain access.

Similar updates

Details

Summary

Azure ACS for SharePoint Online will retire on April 2, 2026. New tenants cannot use it after November 1, 2024. Organizations must migrate custom apps to Microsoft Entra ID for secure authentication and use the Microsoft 365 Assessment tool to identify Azure ACS usage.

HelpLink

https://aka.ms/retirement/acs/support

Body (from Message Center)

Updated October 3, 2025: This update serves as a reminder that Azure ACS in Microsoft 365 will retire and stop working in 6 months from now (April 2, 2026).

Since the first use of Azure Access Control Services (ACS) by SharePoint in 2013, Microsoft has evolved the authorization and authentication options for SharePoint Online via Microsoft Entra ID (a.k.a. Azure AD). Using Microsoft Entra ID as auth platform for your SharePoint Online customizations will provide your applications the most secure, compliant and future proof model. With our continued investment in Microsoft Entra ID, Microsoft is retiring the use of Azure ACS as auth platform for SharePoint Online.

[Key Points:]

Major: Retirement
Timeline:
- Starting November 1st, 2024, new tenants will not be able use Azure ACS.
- Starting April 2, 2026, Microsoft will remove the ability use SharePoint ACS for existing tenants.
Action: Review and assess impact

[How this will affect your organization]

If your organization still uses Azure ACS to grant custom developed or third party applications access to SharePoint Online, they will no longer have access after April 2nd, 2026. We recommend customers to update their customizations to use Microsoft Entra ID and ask their solution vendors to do the same.

[What you need to do to prepare]

You will want to notify your Azure ACS users and developers. Update your user training and prepare your help desk.

For admins

Use the Microsoft 365 Assessment tool to scan your tenants for Azure ACS usage.
Review the guidance for migrating from Azure ACS to Microsoft Entra ID.
There will not be an option to extend Azure ACS usage for SharePoint Online beyond April 2nd 2026.

Learn more

Support update for the retirement of Azure ACS for SharePoint Online in Microsoft 365.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-04-02T00:00:00Z",
    "ai_actions": [
      "Scan tenants for Azure ACS usage",
      "Notify ACS users and developers",
      "Update custom apps to use Entra ID",
      "Update user training and help desk",
      "Review migration guidance"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Azure ACS will retire for SharePoint Online on April 2, 2026; update custom apps and integrations to use Microsoft Entra ID to maintain access.",
    "ai_topics": [
      "SharePoint",
      "Entra"
    ],
    "category": "planForChange",
    "details_map": {
      "HelpLink": "https://aka.ms/retirement/acs/support",
      "Summary": "Azure ACS for SharePoint Online will retire on April 2, 2026. New tenants cannot use it after November 1, 2024. Organizations must migrate custom apps to Microsoft Entra ID for secure authentication and use the Microsoft 365 Assessment tool to identify Azure ACS usage."
    },
    "id": "MC693863",
    "importance": 5,
    "is_major_change": true,
    "last_modified": "2025-10-03T14:46:51Z",
    "ms_products": [
      "SharePoint"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "SharePoint Online"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "User impact",
      "Admin impact",
      "Retirement"
    ],
    "title": "(Updated) Azure ACS retirement in Microsoft 365"
  }
}