Proofpoint Essentials - Microsoft Add-in Permissions Update on 17th February 2025

Microsoft is updating its add-in permissions process on 17th February 2025, requiring PhishAlarm and Email Encryption Add-in users to take specific actions to maintain uninterrupted functionality. This update transitions from legacy Exchange tokens to Nested App Authentication (NAA), enhancing authentication and identity protection for Office 365 users.

Affected Products:

• PhishAlarm Add-in for Microsoft 365
• Email Encryption Add-in for Microsoft 365
• (On-premise Exchange customers are unaffected.)

Required Actions for Admins:

For the PhishAlarm Add-in:

1. Log in to the Proofpoint Security Awareness (PESA) platform.
2. Navigate to: Security Awareness Platform > Alerting > Add-in Setup > Install.
3. Authenticate as a Global Administrator in Microsoft 365 and accept the necessary permissions.

For the Email Encryption Add-in:

1. Log in to your Microsoft 365 Admin Account.
2. Access the following URL: https://login.microsoftonline.com/organizations/adminconsent?client_id=215c2929-b469-432f-aa45-2e018f456e51
3. Grant permissions across your organization by following the instructions on the screen.
   

Additional Information:

For more details and a step-by-step guide, refer to the Nested App Authentication Update - Proofpoint Essentials Add-ins documentation https://help.proofpoint.com/Essentials/Additional_Resources/Release_Notes/Nested_App_Authentication_Update_-_Proofpoint_Essentials_Add-ins