Pre-authenticated (tempauth) URLs are retiring: move to Microsoft Entra ID tokens before April 1, 2027
SharePoint Online and OneDrive will retire pre-authenticated tempauth URLs by April 1, 2027.
“If an API returns a URL that previously worked without authentication because it embedded a token in the URL, that URL must now be accessed by presenting a valid Microsoft Entra ID access token at request time.”
Microsoft is deprecating pre-authenticated (tempauth) URLs in SharePoint Online and OneDrive, requiring developers to switch to Microsoft Entra ID OAuth tokens by April 1, 2027. This is a security hardening measure to prevent auth tokens from leaking via URL logs, caches, and forwarding. The change has no meaningful AI industry signal and is primarily a developer migration notice for Microsoft 365 app builders.