Migrate the Microsoft Exchange for Zoho CRM extension from EWS to OAuth

Migrate the Microsoft Exchange for Zoho CRM extension from EWS to OAuth

Microsoft will begin the phased disablement of Exchange Web Services (EWS) in Exchange Online on October 1, 2026, with permanent retirement scheduled for April 1, 2027.

To continue using the Microsoft Exchange for Zoho CRM extension without interruption, organizations that currently connect their Microsoft 365 or Exchange Online accounts using basic authentication through the Exchange Server (EWS) option must migrate to OAuth authentication.

For more information about the EWS retirement timeline, refer to Microsoft’s official announcement.

Warning
Warning: Revoking the Microsoft Online connection affects all extension users in the organization.

Before you migrate

The administrator who initially configured the extension must perform the migration first. After the administrator completes the migration, the required users must be enabled from User Management.

During the migration:
  1. The existing Microsoft Online connection will be revoked for the administrator and all extension users.
  2. The administrator and affected users may authorize the previously connected Microsoft 365 account or a different account.
  3. The existing synchronization settings will be retained.
  4. Data synchronization will be enabled for the administrator by default.
  5. Data synchronization will remain disabled for other users until the administrator enables them.
  6. The existing SalesInbox integration will be deactivated when the Microsoft Online connection is revoked.
  7. Once OAuth authorization is complete, no separate SalesInbox configuration is required. Email synchronization will resume automatically based on the retained synchronization settings.

Migrate the administrator account

To migrate the administrator account:
  1. Sign in to Zoho CRM using an administrator account that was initially configured to use the extension.
  2. Open the MS Exchange Sync web tab.
  3. Click the menu icon and select Revoke.
    The existing authorization will be revoked, and you will be redirected to the extension sign-in page.
  4. Under Microsoft 365/Exchange Online, click Click here.
  5. Select one of the following OAuth authorization methods:
    1. Authorization Code
    2. Client Credentials
  6. Sign in using the appropriate Microsoft 365 account. You can authorize the previously connected account or use a different account.
  7. Complete the OAuth authorization.
The existing synchronization settings will be retained, and data synchronization will be enabled for the administrator by default.

The extension scheduler will resume synchronization for the authorized account based on the retained settings. Synchronized emails will be available in SalesInbox, while contacts, tasks, and events will be synchronized with their corresponding areas in Zoho CRM.

Enable data synchronization for users

After the administrator completes the migration:
  1. Open the MS Exchange Sync web tab.
  2. Click the menu icon and select User Management.
  3. Enable the required users by turning on the toggle for that user.

The authorization process for enabled users depends on the OAuth authorization method selected by the administrator.
  1. Authorization Code: Each user must authorize the extension using their own Microsoft 365 credentials. After data synchronization is enabled for a user, the user must open the MS Exchange Sync web tab, sign in to their Microsoft 365 account, and authorize the extension using OAuth.
  2. Client Credentials: Only the administrator must authorize the extension. The administrator’s authorization is used to synchronize supported data for the enabled users in the organization. Individual users don't need to sign in or authorize the extension separately.

SalesInbox synchronization

Revoking the existing authorization deactivates the current SalesInbox integration.

After the OAuth authorization is completed, the administrator and users don't need to configure SalesInbox again. The extension scheduler will automatically resume email synchronization based on the retained synchronization settings.

If a different Microsoft 365 account is authorized during migration, emails from that account will be synchronized with SalesInbox according to the configured settings.