Table of Contents
Summary
- Microsoft 365 Copilot will transition API endpoints from the legacy office.com domain to cloud.microsoft domain, enhancing reliability and security.
- Users will not see changes in the interface or workflows, ensuring no impact on their experience as long as network configuration follows established guidelines.
- Organizations with restricted access to the cloud.microsoft domain or WSS connectivity might face performance or reliability issues with Microsoft 365 Copilot.
- Administrators should verify that traffic to cloud.microsoft is allowed and ensure WSS connectivity is not blocked.
- Communication with networking and helpdesk teams is essential to prepare for this transition.
Admin Impact: High
User Impact: Low
Release Start: 30 Apr 2026
Release End: 30 Apr 2026
Services: M365 Copilot
Category: Stay informed
Tags: Admin Action
History
4/20/2026 Item Added to Message Center
Microsoft Message
Introduction
We’re updating the API endpoints used by Microsoft 365 Copilot to align with Microsoft’s ongoing transition to the cloud.microsoft domain. This change improves service reliability and security by ensuring Copilot-connected workloads use modernized Microsoft 365 network endpoints.
This update is part of a previously announced Microsoft domain unification initiative across Microsoft 365 services. This update does not introduce changes to the Microsoft 365 Copilot user interface and will not impact user experience, provided your environment follows published Microsoft 365 and Copilot network configuration requirements.
When this will happen
General Availability (Worldwide, GCC): Rollout will begin in late April 2026 and is expected to complete by late April 2026.
How this affects your organization:
Who is affected
- Microsoft 365 administrators managing network configurations for Microsoft 365 and Microsoft 365 Copilot
- Organizations using custom firewall, proxy, or endpoint filtering configurations within their tenant environment that restrict or interfere with WebSocket (WSS) connections
What will happen
- APIs used by Microsoft 365 Copilot will transition from the legacy office.com domain to the cloud.microsoft domain.
- This change occurs at the service infrastructure level and is not visible to users.
- No changes to the Microsoft 365 Copilot user interface or workflows are expected.
- The change is enabled by default and cannot be disabled
- If your organization has followed previously published Microsoft 365 and Microsoft 365 Copilot network connectivity requirements:
- No action is required
- No service impact is expected
- Organizations that restrict access to the cloud.microsoft domain or restrict WSS connectivity may experience Microsoft 365 Copilot performance or reliability issues
What you can do to prepare:
- Confirm that traffic to *.cloud.microsoft is included in your Microsoft 365 endpoint allow list.
- Verify that WSS connections to *.cloud.microsoft destinations are not blocked or interfered with.
- Exempt traffic to *.cloud.microsoft from intrusive network actions such as:
- TLS decryption
- Packet inspection
- Network-level DLP
- Review Microsoft 365 network connectivity guidance:
- Microsoft 365 endpoints
- Microsoft 365 Copilot connectivity requirements
- Communicate this change to your networking and helpdesk teams.
- Run the Microsoft 365 Copilot Network Connectivity Test: Microsoft 365 Copilot Network Connectivity Test.
Compliance considerations
No compliance considerations identified, review as appropriate for your organization.