Nested App Authentication (NAA)

[Ruralist]

I am a single Zoom Account user with a single family Microsoft 365 account, not a workplace acount.  The directions given to switch over to the new authentication protocol using Nested App Authentication (NAA) just don't work for me.  Can someone please direct me to a workflow that works? Windows 11, Updated Zoom, current Microsoft Family 365 account. 

Dear Valued Customer, 

Microsoft is deprecating Outlook legacy tokens with their introduction of a new authentication protocol, Nested App Authentication (NAA). This change will impact the Zoom for Outlook add-in's ability to access calendar data effectively. To ensure uninterrupted functionality, action is required by the week of January 27, 2025. Please use the steps in the support article for uninterrupted service.

If NAA is not enabled, you may encounter the following issues:

• Inability to update single occurrences in a recurring meeting series.
• Loss of functionality due to deprecated callback tokens.
• Compatibility issues with the Outlook REST API.
• Potential data synchronization problems between Zoom and Outlook.

We appreciate your prompt attention to this matter to ensure a seamless experience with your Zoom for Outlook add-in.

Team Zoom 

[storyhub]

Zoom does NOT REQUIRE the use of outlook. You may want to disconnect Zoom from outlook and just use Zoom's scheduling.

[Ruralist]

Storyhub, thanks for the reply.  I understand that I do need Zoom integrated (add-in) with Outlook.  I have had Zoom add-in to Outlook pre-Covid 19 as a pro-account and it has been very convenient within Outlook. I also schedule some Zoom meetings in Zoom and do not use the Outlook add-in functionality.  I am now trying to make sure I don't loose that functionality.      

[bnorman]

I reached out to Zoom Support on this regarding our business account.  According to the response, as long as individual users have bi-directional sync enabled, they will not need to enable nested app authentication. 

From Zoom: 

Upon checking, Nested app authentication (NAA) for Office add-ins replaces legacy Exchange tokens with Microsoft Entra ID policies, as required by Microsoft’s security standards. This ensures compliance with Exchange data access protocols and supports secure authentication workflows.

Zoom recommends enabling the feature. However, it is not required if the user's O365 calendar integration is enabled with Zoom's "bidirectional sync" feature.

Not sure if that helps, but FYI. 
 

[Ruralist]

Greetings bnorman,  Thanks for the interest and reply. I will try and find the path to "bi-directional sync" features on my system configuration and ensure that is set. Then I will post here and close the tread; hopefully.

[MGSR]

Hello @Ruralist!

I just want to follow up if using bi-directional sync has resolved the issue for you.

I look forward to your response.

[BethFell]

@MGSRis there documentation that says, NAA is not required if bi-directional sync is turned on.  We have bi-directional sync enabled by default for users on our account so I'm not sure how quickly we need to turn on NAA. Also, is the switch to NAA transparent to users?