Hi everyone,

Following the earlier post on this subject, we want to additionally remind that the Google SecOps Exchange integration stops working with Exchange Online in February of 2025 due to the changes introduced by Microsoft. To avoid disruptions, migrate your Exchange Online workloads to the Microsoft Graph Mail integration at your earliest convenience.
The Exchange integration for on-premise Exchange deployments remains unaffected.

Additional information on the issue:

In February of 2024, Microsoft released an announcement about the retirement of RBAC Application Impersonation in Exchange Online. According to the announcement, assigning the ApplicationImpersonation role in Exchange Online is blocked as of September of 2024, and the ApplicationImpersonation role will be completely removed from Exchange Online in February of 2025. This change directly affects the SecOps Exchange integration as it will stop working with Exchange Online and will be usable only with the Exchange on-premise deployments.

What you need to know

To connect a Google SecOps instance with the Exchange Online tenant, the Google SecOps Exchange integration uses ApplicationImpersonation role that impersonates an Exchange Online mail account with a Microsoft Entra ID Application.Starting in February of 2025, it will be impossible to impersonate the Exchange Online mail account with the ApplicationImpersonation role.

What you need to do

If you use Exchange Online, migrate your Exchange Online workloads to Microsoft Graph Mail integration before February of 2025.

The Microsoft Graph Mail integration is specifically designed to work with Exchange Online using the Microsoft Graph API. The Google SecOps Microsoft Graph Mail integration with its improved configuration process provides a functionality for Exchange Online that is similar to the functionality of the Exchange integration. For more information, see the Google SecOps Microsoft Graph Mail integration documentation.