[Outlook](authentication) Updates to promote current NAA auth approach

[davidchesnut]

NAA is now our recommended auth pattern for implementing SSO. This PR:

• Promotes SSO via MSAL NAA as the recommended SSO approach.
• Demotes promotion of legacy Office SSO.
• Clearly marks Exchange on-premise actions (callback and identity tokens) as only for on-premise and moves these into a subfolder in the TOC.

[learn-build-service-prod]

Learn Build status updates of commit 54e8919:

❌ Validation status: errors

Please follow instructions here which may help to resolve issue.

File	Status	Preview URL	Details
	❌Error		Details

• [Error: CannotMergeCommit] Cannot merge commit 54e89193bf314d89f0db9b5ab5c2f85b5b9383cd in branch davech-outlook-naa-update of repository https://github.com/OfficeDev/office-js-docs-pr into branch main (commit c4d070f0d806daf5a1bf4941dd7d05da0222d791). Please follow this documentation: https://help.github.com/articles/resolving-a-merge-conflict-using-the-command-line/ to use git.exe to resolve you content conflicts locally and then push to remote.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

[learn-build-service-prod]

Learn Build status updates of commit 41e02e8:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[samantharamon]

Should the article title still include "preview"?

[davidchesnut]

fixed

[samantharamon]

Consider adding the samples to a subsection for improved visibility.

[davidchesnut]

fixed

[samantharamon]

Suggested change

	[!INCLUDE [legacy-exchange-token-deprecation](../includes/legacy-exchange-token-deprecation.md)]
	> [!NOTE]
	> Most functionality in the Exchange user identity token can also be achieved by using the [Microsoft Graph mail API](/graph/outlook-mail-concept-overview).

If you accept the previous suggestion to move the alerts, this removes the alerts from this subsection.

[samantharamon]

Do we need to amend or remove the note about Office.auth.getAccessToken?

[mattgeim]

I agree - I don't think we need to promote OBO here, change it to call out NAA supports this in the note or remove it? Would we also remove the line above that tells them to use OBO getAccessToken?

[davidchesnut]

I rewrote this to be more clear. It's if you need to support older clients with legacy SSO this is recommended.

[mattgeim]

+1 to Sam's suggestions, otherwise 👍

[learn-build-service-prod]

Learn Build status updates of commit f619e42:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

Learn Build status updates of commit 965be2e:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

Learn Build status updates of commit 14bfacb:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

Learn Build status updates of commit 7fa7256:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

Learn Build status updates of commit 075ca2a:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

[learn-build-service-prod]

Learn Build status updates of commit a30585c:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/delegate-access.md	✅Succeeded	View
docs/outlook/get-attachments-of-an-outlook-item.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/metadata-for-an-outlook-add-in.md	✅Succeeded	View
docs/outlook/microsoft-graph.md	✅Succeeded	View
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

Learn Build status updates of commit 978ede2:

✅ Validation status: passed

File	Status	Preview URL	Details
.openpublishing.redirection.json	✅Succeeded	View
docs/develop/authorize-to-microsoft-graph.md	✅Succeeded	View
docs/develop/sso-in-office-add-ins.md	✅Succeeded	View
docs/develop/use-sso-in-event-based-activation.md	✅Succeeded	View
docs/outlook/authenticate-a-user-with-an-sso-token.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/authentication.md	✅Succeeded	View
docs/outlook/delegate-access.md	✅Succeeded	View
docs/outlook/get-attachments-of-an-outlook-item.md	✅Succeeded	View
docs/outlook/implement-sso-in-outlook-add-in.md	✅Succeeded	n/a (file deleted or renamed)
docs/outlook/metadata-for-an-outlook-add-in.md	✅Succeeded	View
docs/outlook/microsoft-graph.md	✅Succeeded	View
docs/toc.yml	✅Succeeded	View

For more details, please refer to the build report.

[learn-build-service-prod]

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.