Microsoft to End Low-Trust SharePoint Add-Ins in 2027
Microsoft will stop supporting provider-hosted SharePoint add-ins that use low-trust authorization on January 12, 2027.
Updated on Nov. 6, 2026 in Software
Microsoft has set January 12, 2027, as the end-of-support date for low-trust SharePoint add-ins in SharePoint Server Subscription Edition. A January 2027 public update will disable these add-ins by default.
Why it matters
Organizations running affected add-ins will need to migrate their customizations before the update takes effect. Microsoft recommends moving suitable work to the SharePoint Framework or supported farm solutions.
The deprecation covers provider-hosted add-ins using low-trust authorization and app-only principals registered through AppRegNew.aspx, while the SharePoint REST, CSOM, and JSOM APIs remain outside its scope. Once code is removed, administrators will not be able to re-enable the low-trust implementation.
The players
Microsoft
Microsoft is the software company that develops SharePoint Server and its Subscription Edition, and it is setting the deprecation timeline for low-trust add-ins.
The details
Affected principals are app-only principals registered through AppRegNew.aspx that use the same authorization approach. Microsoft says instructions for temporarily turning the functionality back on, along with the related risks, will be published with the January update.
Timeline
January 12, 2027: End-of-support date for low-trust SharePoint add-ins.
January 2027: Public update disables low-trust add-ins by default.
The Tech Race
The deprecation of low-trust authorization in SharePoint Server Subscription Edition shifts customization toward the SharePoint Framework, which Microsoft positions as its supported extensibility path. Organizations relying on the retired model must reassess their integrations as the platform moves to stricter authorization standards.
Administrators running provider-hosted SharePoint add-ins with low-trust authorization will need to migrate those customizations before the January 2027 update disables them by default. Teams should plan migration to the SharePoint Framework or supported farm solutions ahead of the cutoff.
The takeaway
Administrators should audit their SharePoint environments now for low-trust add-ins and begin migration planning well before January 2027. Waiting until the update lands leaves less room to test replacements.
What happens next
Microsoft will publish instructions for temporarily re-enabling low-trust add-ins along with the January 2027 public update, and a later date for complete code removal will be set.
Further reading
Explore more in the Software section for context on enterprise platform updates.
