External access tokens for actionable messages will be retired by May 15, 2026, replaced by Microsoft Entra authentication to enhance security. Organizations must update integrations before this date, as messages using legacy tokens will fail. The phase-out completes by June 8, 2026.
Applies to: Microsoft 365 apps
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).