Microsoft discontinuing Application Impersonation in February 2025
We’d like to share an important update regarding your Teem calendar integration with Microsoft.
Microsoft discontinuing Application Impersonation, February 2025, impacting calendar integrations
Microsoft has announced that it will no longer support the Application Impersonation role for Microsoft Exchange Online connections, and you can learn more about this change in the official Microsoft article.
What this means for you
As part of our ongoing efforts to enhance security and improve functionality, we are transitioning to Microsoft Graph API. This change will require some updates to the user interface (UI) and a one-time re-authentication of service accounts by customers.
Add a new Calendar
|
Coming Soon - When you add a calendar, "What type of calendar account do you use?" dialog is displayed. Select the Office 365 (O365) calendar based on the permissions you require.:
*App-Level Impersonation: When App Level impersonation is selected, you are prompted to enter the service account email to use for Microsoft authentication. Enter the service account email id and click Next.
|
Existing Service Accounts
We recommend that all customers re-authenticate their service accounts starting February 23rd, 2025 to avoid any disruption in service. If you have any questions or need assistance, contact our support team.
If you are currently using app-level impersonation:
- You will need to re-authenticate and provide consent for your service account to ensure continued access.
- Make sure App-level Impersonation option button is selected.
If you are using delegate permissions and want to switch to app-level impersonation:
- Select the App-Level Impersonation option button in your account settings and save.
- Immediately Re-authenticate your service account.
If you are using app-level impersonation and want to switch to delegate permissions:
- Select the Full Access Delegate option button in your account settings and save.
- Immediately Re-authenticate your service account.
If you are using delegate permissions and want to continue using them:
- If you experience any calendar syncing issues, we recommend re-authenticating your service account.
If you select App-Level Impersonation in your account settings but are currently using delegate permissions in your service account, your delegate settings will be overridden by the app-level impersonation settings.
As announced in May 2024 we are no longer supporting basic auth (Exchange 2016 or below).
Teem recommends customers to use App-Level Impersonation over Delegate as delegate access has throttling issues as informed by Microsoft.
Q. How do I re-authenticate an existing Service Account?
- From the menu, click Calendars.
- Select the calendar and click the Re-authenticate Account tab.
- Follow the prompts, and click the Accept button to re-authenticate your service account using the authentication flow by giving consent.
Q. What if I use app-level impersonation and do not re-authenticate my service account?
Your calendar syncing will fail, and your events will not be synced.
Q. Can I action this re-authentication prior to February, 23rd 2025?
If you complete this action before the date, this will not help; you must re-authenticate post February 23rd.
Q. What is the difference between App impersonation and delegate?
Learn more in Impersonation and EWS in Exchange | Microsoft page