---
schema_version: "1"
id: a3825e578606ca82a42033485588aeaa35a64e27c16875f770851b3b3030a68c
title: Use a Service Account to Connect an Exchange On-Premises Server to Einstein Activity Capture
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/aac_setup_service_account_on_prem.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.aac_setup_service_account_on_prem.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 128f7479737e4fa126c640d7c35fc21a4e329f2bf7ca6b6cb9cf63cf35fc62b4
description: If your company uses Microsoft Exchange 2019, 2016, or 2013 on-premises, you can connect to Einstein Activity Capture by using a service account. The Salesforce admin works with their Exchange admin to create a service account with the impersonation role and give Salesforce access to the service account user’s data. By using a service account, you can scope authentication to a specific set of users and set up all Einstein Activity Capture users at the same time.
products:
  - Sales Cloud
  - Cross Cloud
  - Service Cloud Voice
release: "264"
---
# Use a Service Account to Connect an Exchange On-Premises Server to Einstein Activity Capture

If your company uses Microsoft Exchange 2019, 2016, or 2013 on-premises, you can connect to Einstein Activity Capture by using a service account. The Salesforce admin works with their Exchange admin to create a service account with the impersonation role and give Salesforce access to the service account user’s data. By using a service account, you can scope authentication to a specific set of users and set up all Einstein Activity Capture users at the same time.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein Activity Capture Standard in Sales in <strong>Starter</strong>, <strong>Pro Suite</strong>, <strong>Professional</strong>, and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with <strong>Unlimited </strong>Edition, <strong>Einstein 1 Sales Edition</strong>, and <strong>Agentforce 1 Edition</strong></td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein for Sales, which is included in <strong>Einstein 1 Sales Edition</strong> and available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Sales Engagement, which is included with Sales in <strong>Performance</strong> and <strong>Unlimited</strong> Editions, and available for an extra cost in <strong>Professional</strong> and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Revenue Intelligence, which is available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/images/icon_note.png)

Note We’re reorganizing the Einstein Activity Capture documentation. We’re moving some information around, but we aren’t deleting anything.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d139894e135">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d139894e135 ">To connect Salesforce to a Microsoft Exchange server:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d139894e135 ">Customize Application or Modify All Data</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d139894e135 ">To view the Einstein Activity Capture setup pages:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d139894e135 ">
              <p>View Setup and Configurations </p>
              <p>and</p>
              <p style="margin-bottom:0;">Customize Application or Modify All
                Data</p>
            </td>

          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/images/icon_important.png)

Important In February 2025, Microsoft retired the ApplicationImpersonation role in Exchange Online. As a result, Salesforce is retiring service account OAuth 2.0 access to Microsoft Office 365. To continue activity data capture, upgrade to org-level OAuth 2.0 authentication in Einstein Activity Capture settings. During the upgrade process, you're prompted to log in to your Microsoft Office 365 tenant. Make sure that you log in to the same tenant you used when creating the connection. Otherwise, reset your Einstein Activity Capture connection and start over. See [EAC to MS Office 365: Service Account OAuth 2.0 Retirement](https://help.salesforce.com/s/articleView?id=002420794&type=1&language=en_US) and [Upgrade Your Service Account Connections to Org-Level OAuth 2.0 Authentication](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_productivity_eac_service_acct_eol.htm&release=252&type=5&language=en_US).

1. Make sure that your Exchange server is visible to Salesforce by [allowing the necessary network access](https://help.salesforce.com/s/articleView?id=sales.aac_setup_allow_access.htm&release=264.0.0&type=5 "When setting up Einstein Activity Capture with a Microsoft Exchange on-premises server (2019, 2016, or 2013) or Microsoft Office 365, make sure that you allow the necessary network access.").
2. Before you set up Einstein Activity Capture, [work with your Exchange admin to set up the service account](https://help.salesforce.com/s/articleView?id=sales.aac_setup_service_account_prep.htm&release=264.0.0&type=5 "Before you can set up Einstein Activity Capture by using the service account connection method, make sure that you work with your Exchange admin to get things ready on the Microsoft side.").
3. From Setup, in the Quick Find box, enter Einstein Activity Capture, and then select **Settings**. If it’s your first time setting up Einstein Activity Capture, the setup flow guides you through the steps. If you already set up Einstein Activity Capture and want to change the authentication method, reset Einstein Activity Capture.
4. Select **Microsoft Exchange** as the email and calendar application.
5. Select **Service Account** as your authentication method.
6. To give Salesforce access to the Exchange service account, follow the steps.
    1. Enter the login credentials for your company’s Microsoft Exchange service account.
    2. If your sales reps have different email domains than your service account domain, enter the additional domains in a comma-separated list.
    3. To test that the Microsoft Exchange service account is set up properly, enter a user who the service account has access to.
7. Follow the remaining Einstein Activity Capture setup steps, including creating a configuration and adding users to it.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/images/icon_note.png)

Note When you use a service account, users who are in configurations with emails enabled are prompted to accept the Einstein Activity Capture terms of service. Until they do so, email data isn’t captured.

#### See Also

- [Test a User’s Einstein Activity Capture Sync Status](https://help.salesforce.com/s/articleView?id=sales.aac_setup_test_user_sync_status.htm&release=264.0.0&type=5 "If you connect to Einstein Activity Capture using an org-level connection or service account, you can test whether a user’s contacts and events are syncing properly. If a problem occurs, you can reset the user. We also show you that the user accepted the Einstein Activity Capture terms of service and you can send a reminder.")
- [Set Up Einstein Activity Capture for Your Team](https://help.salesforce.com/s/articleView?id=sales.aac_setup_parent.htm&release=264.0.0&type=5 "Get your sales reps up and running with Einstein Activity Capture. Give users access to Einstein Activity Capture. Connect your company’s email and calendar application to Salesforce, and create a configuration that controls how data moves between applications. Define settings such as which data to exclude and how activities are shared. When you’re done configuring Einstein Activity Capture, your users have some setup to do, too.")