MRC · Launched

Microsoft Copilot (Microsoft 365): Federated Copilot Connectors

Microsoft is announcing the General Availability (GA) of federated Copilot connectors for Microsoft 365 Copilot. Federated Copilot connectors enable users to securely connect Copilot to popular third‑party sources and retrieve data in real time using the Model Context Protocol (M

Microsoft Copilot (Microsoft 365) 03 Horizon04 Security05 GRC08 Adoption09 Work & Skills

DIGITAL SKILL WORKS LTD / 12 PANES

What it is

Microsoft Copilot (Microsoft 365): Federated Copilot Connectors is a Microsoft 365 roadmap item published via Microsoft Release Communications. Current status: Launched.

What it does

Microsoft is announcing the General Availability (GA) of federated Copilot connectors for Microsoft 365 Copilot. Federated Copilot connectors enable users to securely connect Copilot to popular third‑party sources and retrieve data in real time using the Model Context Protocol (MCP). These connectors do not store or index customer data in Microsoft services; access occurs in real time using the user’s identity, while administrators retain full governance and control through the Microsoft 365 admin center. With GA, federated Copilot connectors will be supported in Researcher agent, Microsoft 365 Chat, and Agent Mode in Excel, enabling users to bring external data directly into their workflows.

Why you should care

  • Board: Agents change operating risk. Ask for registry coverage and owner accountability first.
  • CISO: Treat agents as privileged actors: least privilege, owner, lifecycle, and audit before scale.
  • CFO: Map licence or consumption impact to the frozen value case; avoid seat spray.
  • Adoption: Pilot with a named cohort and measure changed work, not vanity clicks.

Suggested action

Wave 0 first: Security → GRC → Cost & Value → Licence → Adoption. Put this on the agent register with a named owner. Do not enable broadly until permissions, DLP, and reclaim rules exist.

12 Panes: 03 Horizon · 04 Security · 05 GRC · 08 Adoption · 09 Work & Skills

Communication needed

  • Security: Assess exposure, Conditional Access, and agent/tool permissions.
  • GRC: Update AI/agent register and evidence path; confirm DPIA triggers if personal data is in scope.
  • FinOps: Forecast seat or credit impact; align to frozen value case.
  • Adoption: Plan cohort messaging, clinics, and success measures.
  • Comms: One story for board and staff — what changes, what does not, who owns risk.

Benefits

  • May improve productivity on a specific Microsoft 365 surface when permissions and data quality allow.
  • Roadmap visibility helps Horizon planning without guessing dates.
  • Agents can automate multi-step work inside existing Microsoft 365 permissions.

Risks

  • Status and dates change; treat MRC as directional, not a contract.
  • Enabling without Steady controls can amplify overshare or cost leakage.
  • Agents act; over-privilege and ownerless agents create lasting exposure.

Source

  • MRC id: 501120
  • Status: Launched
  • Products: Microsoft Copilot (Microsoft 365)
  • GA / disclosure: April CY2026
  • Preview: December CY2025
  • Platforms: Web
  • Cloud instances: Worldwide (Standard Multi-Tenant)
  • moreInfoUrls: —
  • Open on Microsoft 365 Roadmap

Microsoft Release Communications / Microsoft 365 Roadmap (AI at Work). Content is subject to Microsoft API Terms of Use. Dates and status change; verify in the official roadmap before acting.

Back to roadmap intel