Microsoft is retiring Azure AD Graph APIs by September 2025. Applications still using these APIs after this date will face outages. Immediate migration to Microsoft Graph APIs is crucial. Use Microsoft Entra tools to identify impacted apps and ensure smooth transition before the deadline. Unique :
Azure AD Graph API Retirement: What You Need to Know
Microsoft is officially retiring the Azure AD Graph API, urging developers to switch to Microsoft Graph by September 2025. This change follows a multi-year deprecation process that started in September 2024. If your applications still rely on Azure AD Graph APIs, it’s time to act fast.
What’s New in the Retirement Timeline?
Starting early September 2025, any apps using Azure AD Graph APIs—even those with extended access—will lose functionality. Microsoft plans one or two outage tests lasting 8 to 24 hours between late July and early September 2025. These tests aim to ensure a smooth transition but could temporarily disrupt services.
“Applications that were configured for extended access that still depend on Azure AD Graph APIs will not be able to continue using these APIs starting in early September 2025.”
To avoid surprises, watch for detailed timeline updates via Microsoft 365 Message Center notifications.
How to Identify Affected Applications
Microsoft recommends using Microsoft Entra recommendations to pinpoint apps still using Azure AD Graph APIs. These reports analyze actual API usage, offering the most reliable insights. While sign-in logs help track token requests, the retirement impacts API calls—not token acquisition.
For a deep dive, check out Microsoft’s December 2024 blog post, which includes example scripts for exporting these reports.
Migration: Moving from Azure AD Graph to Microsoft Graph
Each affected application needs updating. Apps registered in your tenant appear under the Migrate Applications recommendation. Coordinate with your developers to replace Azure AD Graph API calls with Microsoft Graph APIs immediately.
Vendor-supplied apps show up in the Migrate Service Principals recommendation. Contact vendors for updated versions that rely solely on Microsoft Graph. Prioritize in-house apps first, but keep an eye on third-party updates.
“We’re working with software vendors for popular applications on their migration to Microsoft Graph, and we’ll do our best to allow for sufficient notice.”
Special Cases: Microsoft-Provided Apps & Service Principals
Some Microsoft apps you use may already have newer versions without Azure AD Graph dependencies. Update these as soon as possible. Also, if you use service principal logins (e.g., Azure PowerShell, Azure CLI, Terraform), check the migration recommendations carefully.
Note that AzureAD PowerShell modules will stop working by mid-October 2025. Switch to Microsoft Graph PowerShell or Microsoft Entra PowerShell modules to stay supported.
Final Thoughts
The Azure AD Graph API retirement is a big shift but necessary for enhanced security and programmability. Start your migration now to avoid downtime and keep your identity management workflows smooth.
For more details, visit Microsoft’s official migration guide and keep an eye on Microsoft Entra updates.
From the Microsoft Entra Blog articles
Windows Server Devices Now Recognized as a New OS in Intune Microsoft has announced that Windows Server devices are Read more
Microsoft Power Platform is leading the way in AI-generated low-code app development. With the help of AI, users can quickly Read more
Microsoft Intune is an enterprise mobility management platform that helps organizations manage mobile devices, applications, and data. The October edition Read more
Microsoft Intune has released its November edition, featuring new updates to help IT admins better manage their organization’s mobile devices. Read more
