Important Update: Changes to Jira Cloud for Outlook Integration

[#1]

Hi Jira Community,

We have made some important updates to the Jira Cloud for Outlook integration. These changes are part of our ongoing efforts to adopt Nested App Authentication (NAA), as mandated by Microsoft. You can read more about this requirement here.

Effective Date

The rollout was completed in phases to minimize disruption, with the full deployment finalised on 28th July 2025.

What’s Changing?

To comply with NAA, we made several architectural updates. There should be no changes to your user experience once your tenant is fully onboarded.

Admin Consent Required

As part of this migration, the Azure application for this integration requires additional permissions. Microsoft administrators will need to grant admin consent for these permissions.

To grant admin consent:

1. Go to the Azure portal

2. Navigate to Microsoft Entra ID > Enterprise applications

3. Search for Jira Cloud for Outlook and select it

4. Go to Security > Permissions

5. Verify the required permissions are listed

6. Click Grant admin consent (this action must be performed by a Microsoft administrator)

Frequently Asked Questions

Q: Why are users being asked to log in again with Microsoft?
A: This is expected. The add-in now requires new NAA access tokens, so users may be prompted to sign in again.

Q: Why am I seeing a popup to grant admin consent?
A: This is required for the new permissions. Please follow the steps above to grant admin consent and unblock the application.

Q: Why aren’t email attachments uploading to Jira?
A: This may occur when uploading attachments from a shared mailbox. Granting admin consent provides the Mail.Read.Shared permission, enabling access to shared attachments.

Q: What all permissions does the application have?
A: The application asks for the following permissions:

User.Read - Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.
Mail.Read - Allows the app to read the signed-in user's mailbox.
Mail.Read.Shared - Allows the app to read mail a user can access, including their own and shared mail.
openid - Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.
offline_access - Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.

Need Help?

If you have any questions or concerns, please don’t hesitate to reach out. Thank you for your understanding and continued support.

Best regards,
The Atlassian Team