Microsoft Entra: Action required for software vendor applications using retired Azure AD Graph APIs

[What and why]

You are receiving this message because our reporting indicates that one or more applications provided by a software vendor and used in your organization may still be making requests to retired Azure AD Graph APIs.

As previously communicated in MC1202964, Azure AD Graph has been retired and replaced by Microsoft Graph. To minimize customer impact, Microsoft previously delayed retirement enforcement for a limited set of software vendor applications. We are now completing this retirement effort.

Microsoft Graph is the supported API platform and provides continued support, security updates, and ongoing platform investment.

[Rollout schedule]

• Temporary enforcement outages: Beginning in mid-September 2026 and expected to complete by late September 2026
• Permanent retirement enforcement begins: Beginning in mid-October 2026 and expected to complete by late October 2026

[Impact on your organization]

Who is affected

• Organizations using software vendor applications that continue to call retired Azure AD Graph APIs

Platforms and services

• Microsoft Entra ID
• Applications that use Azure AD Graph APIs

What will happen

• Software vendor applications identified in this communication that continue to use retired Azure AD Graph APIs will be blocked from making those API requests.
• Temporary enforcement outages of 8 to 24 hours will occur starting in mid-September 2026.
• Beginning in mid-October 2026, enforcement will become permanent.
• Applications that depend on Azure AD Graph APIs may stop functioning after enforcement begins.
• Microsoft Graph remains the supported replacement for Azure AD Graph.
• Existing applications will not be automatically migrated to Microsoft Graph.

[Action required and recommendations]

To avoid service disruption, complete the following actions by September 15, 2026:

• Review the Microsoft Entra recommendation Migrate Service Principals from the retiring Azure AD Graph APIs to Microsoft Graph to identify applications in your tenant that are calling Azure AD Graph APIs.
• Review the report to determine whether any listed applications are used in your organization. Applications listed in the report are registered in another tenant and appear in your tenant as service principals.
• Contact the software vendor for any affected application and update to a version that uses Microsoft Graph APIs.
• If Microsoft-provided applications appear in the report, update those applications to the latest available version. Although these applications will not stop working in September 2026, we strongly recommend updating them as soon as possible and monitoring future communications for additional guidance.

Learn more

• Azure AD Graph retirement information: Action required: Azure AD Graph API retirement | Microsoft Entra Blog
• Microsoft Entra recommendation: Migrate from Azure AD Graph APIs to Microsoft Graph | Microsoft Learn
• Migrate your apps from Azure AD Graph to Microsoft Graph | Microsoft Graph | Microsoft Learn

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.