Microsoft 365 Message Center item MC1286300

MC1286300 - (Updated) Microsoft 365 Copilot transition to the cloud.microsoft domain

Microsoft 365 Copilot APIs will transition from office.com to cloud.microsoft domain by mid-May 2026, improving reliability and security without user impact. Administrators must ensure network configurations allow traffic and WebSocket connections to *.cloud.microsoft to avoid service issues. No compliance changes identified.

Message Center ID

MC1286300

Category

stay Informed

Severity

normal

Services

Microsoft Copilot (Microsoft 365)

Tags

Updated message, Admin impact

Published

2026-04-20

Last updated

2026-04-30

Expires

2026-06-22

Updated April 30, 2026: We have updated the timeline. Thank you for your patience. [Introduction] We're updating the API endpoints used by Microsoft 365 Copilot to align with Microsoft’s ongoing transition to the cloud.microsoft domain. This change improves service reliability and security by ensuring Copilot-connected workloads use modernized Microsoft 365 network endpoints. This update is part of a previously announced Microsoft domain unification initiative across Microsoft 365 services. This update does not introduce changes to the Microsoft 365 Copilot user interface and will not impact user experience, provided your environment follows published Microsoft 365 and Copilot network configuration requirements. [When this will happen:] General Availability (Worldwide, GCC): Rollout will begin in late April 2026 and is expected to complete by mid-May 2026 (previously late April). [How this affects your organization:] Who is affected: Microsoft 365 administrators managing network configurations for Microsoft 365 and Microsoft 365 Copilot Organizations using custom firewall, proxy, or endpoint filtering configurations within their tenant environment that restrict or interfere with WebSocket (WSS) connections What will happen: APIs used by Microsoft 365 Copilot will transition from the legacy office.com domain to the cloud.microsoft domain. This change occurs at the service infrastructure level and is not visible to users. No changes to the Microsoft 365 Copilot user interface or workflows are expected. The change is enabled by default and cannot be disabled If your organization has followed previously published Microsoft 365 and Microsoft 365 Copilot network connectivity requirements: No action is required No service impact is expected Organizations that restrict access to the cloud.microsoft domain or restrict WSS connectivity may experience Microsoft 365 Copilot performance or reliability issues [What you can do to prepare:] Confirm that traffic to *.cloud.microsoft is included in your Microsoft 365 endpoint allow list. Verify that WSS connections to *.cloud.microsoft destinations are not blocked or interfered with. Exempt traffic to *.cloud.microsoft from intrusive network actions such as: TLS decryption Packet inspection Network-level DLPReview Microsoft 365 network connectivity guidance:Microsoft 365 endpointsMicrosoft 365 Copilot connectivity requirementsCommunicate this change to your networking and helpdesk teams. Run the Microsoft 365 Copilot Network Connectivity Test: Microsoft 365 Copilot Network Connectivity Test. [Compliance considerations:] No compliance considerations identified, review as appropriate for your organization.