DLP Endpoint and Microsoft Nested Application Authentication

Products

• Data Loss Prevention

Issue/Introduction

Is the DLP Endpoint Agent outlook plugin affected by Microsoft's change to nested app authentication for Office add-ins that took effect in October 2024?

 

Reference:

New Nested App Authentication for Office Add-ins: Legacy Exchange tokens off by default in October 2024

 

Environment

Symantec Data Loss Prevention 15.8.x
Symantec Data Loss Prevention 16.x

Resolution

Microsoft's Nested Application Authentication change does not impact the DLP Endpoint Agent.
The DLP Outlook COM plugin and the newer web add-in are directly integrated with the client app, so the DLP Agent does not need to authenticate with the exchange backend or O365.