Critical product update: Microsoft to retire Azure AD Graph API
July 17, 2023
SecureAuth customer announcement in Zendesk: Critical update for SecureAuth IdP Customers leveraging Azure AD as a data store
Recap of customer announcement
Microsoft announced plans to retire Azure AD Graph API on June 30, 2023, in favor of Microsoft Graph API. On June 15, 2023, Microsoft made another announcement that the Azure AD Graph API will be non-supported.
This impacts all applications configured in the Classic Experience that use the Azure AD data store. They may cease to function at a later date based on Microsoft's timeline. For more information, see this KB article from Microsoft: https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/important-azure-ad-graph-retirement-and-powershell-module/ba-p/3848270
This applies to any SecureAuth® Identity Platform release that has an integrated Azure AD data store in the Advanced Settings (formerly Classic Experience).
If you are on the Identity Platform release 22.02 or later and have Azure AD configured in the New Experience, no action is needed from you.
Note
Check back often for any updates and refer to the latest date of this topic at the top.
What do I need to do?
- Contact Support
The Support team will need to analyze your current MFA configurations to determine the next steps.
- Upgrade to release 22.02 or later
To continue using the Azure AD data store in your applications, it requires an upgrade to Identity Platform release 22.02 or later.
- Add Azure AD in the New Experience
After upgrading to Identity Platform release 22.02 or later, add the Azure AD data store in the New Experience. See the following configuration topics:
Azure Active Directory configuration. Topic that details the Azure AD configurations in Microsoft Graph API before you can add the Azure AD data store in the Identity Platform.
Add Azure Active Directory data store. Topic about adding an Azure AD data store in the New Experience.
- Migrate Classic Experience applications to the New Experience
Migrate your applications in the Classic Experience to the New Experience.
First, enable the Classic Migration page. See the Prerequisites in this topic to enable the Classic Migration page: Classic Experience migration to the New Experience.
Next, proceed with the migration. The migration steps are detailed in the same document: Classic Experience migration to the New Experience.