Microsoft 365 to Phase Out Legacy Authentication Protocols
Microsoft routinely updates its service protocols to enhance security and user experience, and this trend is set to continue with its latest decision targeting legacy authentication methods. Following the deprecation of Basic Authentication in Exchange Online and limiting Outlook access for third-party applications that relied on this older protocol, the tech giant is now focused on eliminating outdated protocols for file access within Microsoft 365.
As reported by Bleeping Computer, a notification recently shared in the Microsoft 365 Admin Center indicates that starting in mid-July 2025, Microsoft will begin to disable legacy authentication protocols for file access across various platforms, including Microsoft Office applications, SharePoint, and OneDrive.
Protocols Affected
The move will affect applications and services utilizing the Relying Party Suite (RPS) and FrontPage Remote Procedure Call (FPRPC).These protocols currently facilitate browser-based authentication for operations involving Office files. Microsoft’s decision to phase them out is focused on enhancing the security of its services, particularly as these protocols are increasingly vulnerable to attacks.
Security Risks Underlined
Microsoft underscores that RPS is particularly vulnerable to brute-force and phishing attacks due to its outdated design. Similarly, FPRPC, which is often employed for remote web page creation, carries significant risks due to known exploitation vulnerabilities. As a result, both protocols will be disabled by default, with a targeted completion date for this initiative set for August 2025.
No Changes in Licensing
Notably, Microsoft will implement these updated protocol baselines without requiring any licensing adjustments for its users. However, once these changes are in effect, administrators will need to provide consent for any third-party access to files and sites within their Microsoft 365 environment. IT administrators can find comprehensive guidance on configuring admin consent workflows here.
Alignment with Security Initiatives
These updates are part of Microsoft’s Secure Future Initiative (SFI), which emphasizes the importance of promoting a secure environment for its users. Additionally, this announcement coincides with the rollout of enhanced security defaults for Windows 365, reinforcing the company’s commitment to cybersecurity improvements across its platforms.
Related Articles:
Microsoft Teams Android Devices Update: Disabling Entra ID Policy for Sign-in Restoration
4:10
Microsoft’s Recent Windows App: The Biggest Failure in Years
20:06
Microsoft Cancels Several Xbox Games, Cuts Forza Studio, and Shuts Down Another Project
18:27
Leave a Reply ▼