---
schema_version: "1"
id: 55844957ba6ae16c79f5ce77dac405867b857341c80aa8de56a2b2e7928893f7
title: Upgrade Microsoft Office 365 Authentication Method to Microsoft Graph in Inbox
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/inbox_graph_migration.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.inbox_graph_migration.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e9775c6f80cef71c7ed024edb3f2d5f86ed7608e4c0bcb80c00fdfee2b0e4093
description: Microsoft is retiring Exchange Web Services (EWS) in October 2026. Microsoft Graph API replaces EWS and is more advanced, secure, and scalable. Reauthenticate Inbox to use Microsoft Graph with Microsoft Office 365 by October 1, 2026 to continue working without sync disruption.
products:
  - Sales Cloud
  - Cross Cloud
  - Service Cloud Voice
release: "264"
---
# Upgrade Microsoft Office 365 Authentication Method to Microsoft Graph in Inbox

Microsoft is retiring Exchange Web Services (EWS) in October 2026. Microsoft Graph API replaces EWS and is more advanced, secure, and scalable. Reauthenticate Inbox to use Microsoft Graph with Microsoft Office 365 by October 1, 2026 to continue working without sync disruption.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Unlimited</strong>, <strong>Einstein 1 Sales</strong>, and <strong>Agentforce 1 Sales</strong> Editions. Available for an extra cost in <strong>Professional</strong> and <strong>Enterprise</strong> Editions.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d91909e79">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d91909e79 ">To modify authentication method:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d91909e79 ">
              <p>Customize Application or Modify All Data</p>
              <p>AND</p>
              <p>Manage Lightning
                Sync</p>
              <p>AND</p>
              <p>View Setup and Configuration</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Manage Users</p>
            </td>

          </tr>
        </tbody>
      </table>

Before you begin, confirm that your Azure admin has granted org-wide Microsoft Graph API access and permissions. See [App ID for Microsoft Graph Authentication](https://help.salesforce.com/s/articleView?id=sales.activity_capture_graph_api.htm&release=264.0.0&type=5). The admin setting up the connection from Microsoft is required to be assigned the DirectoryRole of a Global Admin, Cloud Application Admin, or Application Admin.

Starting Spring ’26, Salesforce Inbox configured to use Microsoft Office 365 is automatically authenticated by using Microsoft Graph. If you have configured Salesforce Inbox to use Microsoft Office 365 before Spring ’26, manually upgrade to Microsoft Graph by October 1, 2026. After you upgrade Inbox to Microsoft Graph, users must reconnect to their Microsoft accounts to fully complete the upgrade.

If Einstein Activity Capture is configured in your org and its authentication method hasn’t been upgraded to Microsoft Graph, this upgrade procedure upgrades the authentication method of Einstein Activity Capture and Salesforce Inbox to Microsoft Graph.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/images/icon_note.png)

Note If Einstein Activity Capture isn't set up and you upgrade Salesforce Inbox to Microsoft Graph, any future setup of Einstein Activity Capture with Microsoft 365 uses Microsoft Graph automatically.

1. From Setup, in the Quick Find box, enter Inbox, and then select **Setup Assistant**.
2. In the Upgrade to Microsoft Graph section, click **Upgrade to Microsoft Graph** to start the upgrade.
    
    ![The Upgrade to Microsoft Graph section in Setup Assistant.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/sales_productivity/images/inbox/inbox_graph_settings.png)
3. Consent to confirm that this upgrade requires each user to reconnect to their accounts to fully transition to Microsoft Graph.
    
    If Einstein Activity Capture is configured in the org but hasn’t upgraded to Microsoft Graph, go to [Migrate Microsoft 365 Authentication Method to Microsoft Graph in Einstein Activity Capture](https://help.salesforce.com/s/articleView?id=sales.eac_ews_graph.htm&release=264.0.0&type=5 "Microsoft is retiring Exchange Web Services (EWS) for Microsoft Office 365 in October 2026. Microsoft Graph API replaces EWS. Upgrade the authentication method of Einstein Activity Capture, Inbox, and Lightning Sync to use Microsoft Graph to avoid service disruption.").
4. Click **Finish** to complete the upgrade to Microsoft Graph.
    
    ![Consent to upgrade to Microsoft Graph and click Finish.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/sales_productivity/images/inbox/inbox_graph_consent.png)

Each user must reconnect their account, or their email, event, and contact data stops syncing for their connected accounts in Inbox. Each user account continues to use EWS authentication until they reconnect their account.

#### See Also

- [Upgrade Microsoft Office 365 Authentication Method to Microsoft Graph](https://help.salesforce.com/s/articleView?id=sales.eac_ews_graph.htm&release=264.0.0&type=5 "Microsoft is retiring Exchange Web Services (EWS) for Microsoft Office 365 in October 2026. Microsoft Graph API replaces EWS. Upgrade the authentication method of Einstein Activity Capture, Inbox, and Lightning Sync to use Microsoft Graph to avoid service disruption.")