Skip to main content
Procore

Procore Microsoft Outlook Add-In Outage

  1. Last updated
    Mar 27, 2025
  2. Save as PDF

Procore Microsoft Outlook Add-In Outage

Microsoft is transitioning away from legacy Exchange Online tokens in favor of Nested App Authentication (NAA) to enhance security and provide greater flexibility for Outlook add-ins. Because the Procore Outlook add-in relies on these legacy tokens, this change may cause disruptions or outages.

This article explains the changes, how they may affect Procore users, and how to temporarily re-enable legacy tokens if necessary.

Understanding the Change

  • Nested App Authentication (NAA): NAA provides single sign-on (SSO) for applications within Microsoft applications like Outlook. 

  • Legacy Exchange Online Token Deprecation:

    • Microsoft will begin disabling legacy Exchange Online tokens on February 17, 2025. After this date, add-ins that rely on these tokens may experience functionality issues.

    • After June of 2025, Legacy tokens will be completely disabled. See Procore’s update plan. 

Impact on the Procore Outlook Add-in

The Procore Outlook add-in currently uses the legacy Exchange Online tokens for authentication. As Microsoft transitions to NAA, users may experience:

  • Inability to access or use certain Procore features within Outlook.

  • Authentication errors.

  • General instability or unresponsiveness of the add-in.

Solution: Re-enabling Legacy Exchange Online Tokens

If you experience issues with the Procore Outlook add-in after February 17, 2025, your Microsoft 365 administrator can temporarily re-enable legacy tokens by following the steps below. 

Considerations

  • Legacy tokens issued before the block will remain valid until they expire.

  • Re-enabling legacy tokens will prevent them from being automatically disabled on February 17, 2025, but they must be migrated before June of 2025.

  1. Connect to Exchange Online PowerShell
    Note: This requires the Microsoft user to be a Microsoft administrator and have access to PowerShell. There is no known solution for administrators that don’t have access to PowerShell.

    1. Open PowerShell as administrator
    2. Run: Import-Module -Name ExchangeOnlineManagement 
    3. Run: Update-Module -Name ExchangeOnlineManagement to ensure the latest version of the module is being used.
    4. Run: Connect-ExchangeOnline and sign in with your Microsoft 365 administrator credentials.
  1. Turn on Legacy Exchange Online Tokens:
    1. Run: Set-AuthenticationPolicy –AllowLegacyExchangeTokens -Identity "LegacyExchangeTokens"
      Notes:
      - The Identity parameter is required but does not affect a specific policy. The command applies to the entire organization.
      - It can take up to 24 hours for the change to take effect.

Procore’s Update Plan for the Outlook Add-In

Procore is actively working on updating the Procore Outlook add-in to utilize the modern Microsoft Graph APIs.

This update will:

  • Eliminate reliance on legacy Exchange Online tokens.

  • Enhance the security and performance of the Procore Outlook add-in.

  • Provide a more robust and future-proof integration with Microsoft 365.

We understand the importance of a smooth transition and are committed to providing timely updates on our progress. 

Disclaimer

This information is based on Microsoft's documentation and may be subject to change. Microsoft and Procore are responsible for their respective products and services.

Important: This article's temporary solution requires access to Exchange Online PowerShell. If you do not have access to PowerShell or are unfamiliar with its use, contact your Microsoft 365 administrator for assistance.

Currently, there is no known workaround for customers without access to PowerShell. We are actively working with Microsoft to explore alternative solutions and will provide updates as they become available. We understand this limitation may cause inconvenience and are committed to finding a resolution.