SoSafe and the EWS retirement
Microsoft Graph migration status from SoSafe's own notices. Last checked 2026-10-25.
Phishing Report Button
- Status
- Moved to Microsoft Graph
- Vendor notice
- https://support.sosafe.de/hc/en-us/articles/38451977449757-Phishing-Report-Button-compatibility-matrix
“For all Exchange Online environments (including hybrid deployments) we can only support Graph API”
Phishing Report Button compatibility matrix – SoSafe Support (2026-09-08), read 2026-10-25.
What to do. The SoSafe Phishing Report Button add-in uses Microsoft Graph for Exchange Online and hybrid mailboxes, and EWS only for on-premises Exchange. No step is named for Exchange Online customers.
One email from ewsappid.com each time a status on this page changes, nothing else, and none after 1 April 2027. Every alert has an unsubscribe link; one press deletes your address, or write to support@ewsappid.com at any time. Sender details are on the contact page; see the privacy policy.
Application IDs
This site lists no fixed application ID for SoSafe. Look up an ID from your EWS usage report on the home page, or find the name behind it in Entra, under Enterprise applications.
Every app in your tenant
The tenant plan reads your EWS usage report in your browser and matches each app against these statuses and your current allow list. All vendor statuses.