Prepare Your Microsoft Exchange Server for Lightning Sync

To set up Lightning Sync using the service account connection method, enable these settings on your Microsoft® Exchange server: Exchange Web Services, Exchange Autodiscover Service, and Basic or NTLM authentication.

Required Editions

Available to sync records from: Salesforce Classic, Lightning Experience, and the Salesforce mobile app
Available to set up from: Salesforce Classic and Lightning Experience
Available in: Professional, Enterprise, Performance, Unlimited, and Developer Editions with Sales Cloud, Service Cloud, and Lightning Platform
Important
Important

Starting in Winter ‘21, Lightning Sync isn’t available to new Salesforce customers. Use Einstein Activity Capture to sync events, contacts, and emails between your connected account and Salesforce.

If you have Lightning Sync, use the migration tool to move to Einstein Activity Capture before Lightning Sync retires in 2027. Before you migrate, review Compare Einstein Activity Capture and Lightning Sync to understand what to expect when you migrate.

If your org is exempt from migration because of a licensing issue or if your org doesn’t support Einstein Activity Capture, you won’t see the migration tool in Lightning Sync.

Important
Important Microsoft is retiring Basic Authentication for Exchange Online. When Microsoft blocks Basic Authentication in your Microsoft tenant, Lightning Sync can’t sync contacts and events for customers who have selected service account as their Lightning Sync connection method. See Lightning Sync Service Account Connection Method Availability for Customers on Microsoft Office 365.

Steps vary depending on the version of Microsoft® Exchange your company uses. For help preparing your Exchange server, visit Microsoft’s support website, search for the keywords mentioned here, and follow the instructions intended for your Exchange version.

Enable these settings on your Exchange server.

  1. Enable Exchange Web Services (EWS) on an SSL connection.
    1. Make sure that your Exchange server has a signed certificate from one of the Salesforce-approved Certificate Authorities.
    2. If your organization has configured a firewall, allow an inbound connection to your Exchange client access server on port 443.
  2. Enable Exchange Autodiscover Service.
  3. Enable Basic or NTLM authentication on your Exchange server and on your Autodiscover server. If Basic and NTLM are enabled, Lightning Sync gives connection preference to Basic.