As previously mentioned in a Support Advisory article in September 2024, Microsoft is making several changes that affect the authentication methods of third-party Outlook add-ins, including Hoxhunt Report add-in.
IMPORTANT: Please read this advisory carefully as you may need to take action to keep your Hoxhunt Outlook add-in operational!
Summary of upcoming changes
- Microsoft is migrating from legacy Exchange Online access tokens to Nested App Authentication (NAA) for Outlook add-in user authentication purposes in Exchange Online. The new authentication method requires the use of Microsoft Graph API.
- Microsoft will turn off legacy Exchange Online access tokens in all Exchange Online tenants around February 17th, 2025. They can be turned back on in your tenant until June 2025.
Further reading from Microsoft:
Nested app authentication and Outlook legacy tokens deprecation FAQ
Who are affected
- Customers with Exchange Online mailboxes using Hoxhunt add-in version 1.0.0.6 or earlier.
- If you have originally deployed Hoxhunt Outlook add-in before June 9th, 2022 and haven't updated it since, you likely still have version 1.0.0.6. You must update.
Who are not affected
- Customers who have deployed Hoxhunt add-in version 1.0.0.7 or later.
- Customers with on-premise Exchange Server with only on-premise mailboxes.
What happens if you don't take action
Hoxhunt introduced support for Microsoft Graph API in Hoxhunt add-in version 1.0.0.7 on June 9th, 2022.
If you have deployed Hoxhunt add-in version 1.0.0.6 or earlier for Exchange Online mailboxes, your Hoxhunt add-in will stop working on February 17th, 2025.
Actions to take
Update your Hoxhunt add-in to latest available version (instructions, requires signing in)
If for any reason you cannot update your Hoxhunt add-in by the deadline, you can buy some additional time as follows:
Re-enable legacy Exchange Online access tokens via PowerShell cmdlet (instructions, requires signing in)
Additionally, if your employees with Exchange Online mailboxes are also using volume-licensed Outlook 2016 or 2019 which still relies on Internet Explorer to render content for Outlook add-ins, their user experience will get more cumbersome as they are asked to authenticate every time they use Hoxhunt button. We recommend to re-enable legacy access tokens as for as long as they are still available.
Re-enable legacy Exchange Online access tokens via PowerShell cmdlet (instructions, requires signing in)
If you have any questions regarding this advisory, please contact Hoxhunt Support (support@hoxhunt.com).
Related articles
(2024-09) Action Required: Enable support for new add-in authentication method (NAA)
(2025-01) How to re-enable legacy Exchange Online access tokens