Release 4.0.3 of Microsoft plugins for Moodle 4.0

Release 4.0.3 of Microsoft plugins for Moodle 4.0

Features, bug fixes and small changes in this release include:

• Support sync of "manager email" field. #1833
• Fix an issue where users created from auth_oidc login doesn't obey "allow accounts with same email". #2185, thanks to @tim1mw
• Fix typos. #2194, thanks to @facorread
• Only purge caches when update plugin configurations if necessary. #2260
• Fix a bug in which "oidcresource" and "oidcscope" configuration in auth_oidc are not saved. #2230
• Improve how language sync is handled in user sync to support more language variants (e.g. en_us) and workplace language packs (e.g. en_wp). #2176
• Bug fix in course sync task when a user has both teamowner and teammember cap from multiple roles. #2178
• Remove unnecessary configuration "Tenant name or GUID" from auth_oidc plugin. #2204
• Fix unexpected MS account connection created regardless of user sync option. #2222
• Bug fix syncing all day events for users with timezone set to "server default". #2227
• Fix a bug in which user connection record in local_o365_objects table is not created on auth_oidc user login. #2198
• Bug fix unhandled exception when trying to call Graph API to update events.
• Show notification to provide admin consent only if local_o365 is installed.
• Handle objectId not present in token when syncing user profile field from token.
• Handle error decoding tokens for non-Azure IdP.

Release 3.11.6 for Moodle 3.11

Release 3.11.6 of Microsoft plugins for Moodle 3.11

This is the final release of the Microsoft plugins for Moodle 3.11 since support for Moodle 3.11 has ended. No bug fix or feature updates will be made to this version beyond this point.

Features, bug fixes and small changes in this release include:

• Support sync of "manager email" field. #1833
• Fix an issue where users created from auth_oidc login doesn't obey "allow accounts with same email". #2185, thanks to @tim1mw
• Fix typos. #2194, thanks to @facorread
• Only purge caches when update plugin configurations if necessary. #2260
• Fix a bug in which "oidcresource" and "oidcscope" configuration in auth_oidc are not saved. #2230
• Improve how language sync is handled in user sync to support more language variants (e.g. en_us) and workplace language packs (e.g. en_wp). #2176
• Bug fix in course sync task when a user has both teamowner and teammember cap from multiple roles. #2178
• Remove unnecessary configuration "Tenant name or GUID" from auth_oidc plugin. #2204
• Fix unexpected MS account connection created regardless of user sync option. #2222
• Bug fix syncing all day events for users with timezone set to "server default". #2227
• Fix a bug in which user connection record in local_o365_objects table is not created on auth_oidc user login. #2198
• Bug fix unhandled exception when trying to call Graph API to update events.
• Show notification to provide admin consent only if local_o365 is installed.
• Handle objectId not present in token when syncing user profile field from token.
• Handle error decoding tokens for non-Azure IdP.

Release 4.1.0 for Moodle 4.1

This is the initial release 4.1.0 of the plugins for Moodle 4.1.

The release is based on Release 4.0.2.

The release also contains the following changes:

• Make "Tenant name or GUID" configuration non-mandatory for non-Azure IdP types (#2204)
• Fix an issue where users created from auth_oidc login doesn't obey "allow accounts with same email" (#2185, thanks to @tim1mw)
• Improve how language sync is handled in user sync (#2176)
• Bug fix in course sync task when a user has both teamowner and teammember cap from multiple roles (#2178)
• Support sync of "manager email" field (#1833)
• Fix typo (#2194, thanks to @facorread)
• Fix unexpected MS account connection created regardless of user sync option (#2222)
• Bug fix syncing all day events for users with timezone set to "server default" (#2227)
• Fix unexpected MS account connection created regardless of user sync option (#2230)
• Bug fix unhandled exception when trying to call Graph API to update events

Supplement for release 4.0.2 for Moodle 4.0

Release 4.0.2 of Microsoft plugins for Moodle 4.0

This release contains:

• Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication #1453
• Send notification to site administrator on secret expiry #2115
• Other bug fixes and small changes.

Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication

It is now possible to configure the Moodle plugins to integrate with Microsoft using oauth2 v2.0 (https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-overview), which supports authenticating app using certificates besides client secret.

The auth_oidc plugin configuration pages were redesigned to allow for this.

For differences between Azure Active Directory Endpoints (oauth2 v1) and Microsoft Identity Platform Endpoints (oauth2 v2), please refer to https://devblogs.microsoft.com/premier-developer/azure-ad-endpoint-v1-vs-v2/.

Send notification to site administrator on secret expiry

For sites using client secret authentication, main site admin will get daily notification if the secret will expire within the next 4 weeks.

Bug fixes and small changes

• Fix a bug in the unit test class namespace declaration of assignsubmission_onenote plugin. Thanks to @tlock. (microsoft/moodle-assignsubmission_onenote#4)
• Add missing language string for cache definition. Thanks to @aspark21 (microsoft/moodle-local_o365#35 and microsoft/moodle-local_o365#36)
• Hide error message in behat test. Thanks to @aspark21 (microsoft/moodle-local_o365#34)
• Consider course enrolments, besides role assignments, when finding team owners/members. #2101
• Remove use of legacy APIs. #1323
• Improve how match users by emails are handled. #2034, #2173
• Fix multiple database errors specific to PostgreSQL. #2083, #2084
• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping. #2087
• Fix a bug in course reset observer function to check if the user exists before creating events. #2092
• Fix a bug in the sync of "roles" remote field. #2099
• Avoid PHP warning messages when syncing manually connected users in the user sync task.
• Fix a bug in DB query to check if there are existing users with duplicate emails. #2102
• Support the use of filters in auth_oidc opname setting. #1827
• Bug fix in processing adding additional tenant. #2158
• Update check on mailNickname length when creating group from course. #2183
• Update observer functions to delete outdated records when local_o365 configurations are updated.
• Add Microsoft SECURITY.MD. #2160

Supplement release for 3.11.5 for Moodle 3.11

Release 3.11.5 of Microsoft plugins for Moodle 3.11

This release contains:

• Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication #1453
• Send notification to site administrator on secret expiry #2115
• Other bug fixes and small changes.

Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication

It is now possible to configure the Moodle plugins to integrate with Microsoft using oauth2 v2.0 (https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-overview), which supports authenticating app using certificates besides client secret.

The auth_oidc plugin configuration pages were redesigned to allow for this.

For differences between Azure Active Directory Endpoints (oauth2 v1) and Microsoft Identity Platform Endpoints (oauth2 v2), please refer to https://devblogs.microsoft.com/premier-developer/azure-ad-endpoint-v1-vs-v2/.

Send notification to site administrator on secret expiry

For sites using client secret authentication, main site admin will get daily notification if the secret will expire within the next 4 weeks.

Bug fixes and small changes

• Fix a bug in the unit test class namespace declaration of assignsubmission_onenote plugin. Thanks to @tlock. (microsoft/moodle-assignsubmission_onenote#4)
• Add missing language string for cache definition. Thanks to @aspark21 (microsoft/moodle-local_o365#35 and microsoft/moodle-local_o365#36)
• Hide error message in behat test. Thanks to @aspark21 (microsoft/moodle-local_o365#34)
• Consider course enrolments, besides role assignments, when finding team owners/members. #2101
• Remove use of legacy APIs. #1323
• Improve how match users by emails are handled. #2034, #2173
• Fix multiple database errors specific to PostgreSQL. #2083, #2084
• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping. #2087
• Fix a bug in course reset observer function to check if the user exists before creating events. #2092
• Fix a bug in the sync of "roles" remote field. #2099
• Avoid PHP warning messages when syncing manually connected users in the user sync task.
• Fix a bug in DB query to check if there are existing users with duplicate emails. #2102
• Support the use of filters in auth_oidc opname setting. #1827
• Bug fix in processing adding additional tenant. #2158
• Update check on mailNickname length when creating group from course. #2183
• Update observer functions to delete outdated records when local_o365 configurations are updated.
• Add Microsoft SECURITY.MD. #2160

Release 3.9.11 for Moodle 3.9

Release 3.9.11 of Microsoft plugins for Moodle 3.9

This release contains:

Bug fixes and small changes

• Consider course enrolments, besides role assignments, when finding team owners/members. #2101
• Improve how match users by emails are handled. #2034, #2173
• Fix multiple database errors specific to PostgreSQL. #2083, #2084
• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping. #2087
• Fix a bug in course reset observer function to check if the user exists before creating events. #2092
• Fix a bug in the sync of "roles" remote field. #2099
• Avoid PHP warning messages when syncing manually connected users in the user sync task.
• Fix a bug in DB query to check if there are existing users with duplicate emails. #2102
• Bug fix in processing adding additional tenant. #2158
• Update check on mailNickname length when creating group from course. #2183
• Update observer functions to delete outdated records when local_o365 configurations are updated.

Release 3.10.8 for Moodle 3.10

Release 3.10.8 of Microsoft plugins for Moodle 3.10

This release contains:

Bug fixes and small changes

• Consider course enrolments, besides role assignments, when finding team owners/members. #2101
• Improve how match users by emails are handled. #2034, #2173
• Fix multiple database errors specific to PostgreSQL. #2083, #2084
• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping. #2087
• Fix a bug in course reset observer function to check if the user exists before creating events. #2092
• Fix a bug in the sync of "roles" remote field. #2099
• Avoid PHP warning messages when syncing manually connected users in the user sync task.
• Fix a bug in DB query to check if there are existing users with duplicate emails. #2102
• Bug fix in processing adding additional tenant. #2158
• Update check on mailNickname length when creating group from course. #2183
• Update observer functions to delete outdated records when local_o365 configurations are updated.

Release 4.0.1 for Moodle 4.0

Release 4.0.1 of Microsoft plugins for Moodle 4.0.

This release contains:

• Full support of Single Sign Out feature for connected users.
• Other bug fixes and small changes.

Full support of Single Sign Out feature for connected users (#2014)

The auth_oidc plugin now provides an endpoint which Microsoft services can request to trigger the logout of the connected Moodle users from Microsoft. The URL is https://url.to.moodle/auth/oidc/logout.php, and it can be configured in the "Front-channel logout URL" setting of Azure app.

Bug fixes and small changes

• Improved support for matching users by email in the user sync task. (#2034, thanks to @phager-at)
• Bug fix to prevent unexpected user suspension when full user sync fails. (#2048)
• More flexible schedule options to run user suspension/deletion part of the user sync task. (#2023)
• Add missing delegated permissions required to configure multi-tenancy to PowerShell script and permission check.

Release 3.9.10 for Moodle 3.9

Release 3.9.10 of Microsoft plugins for Moodle 3.9.

This release contains:

• Full support of Single Sign Out feature for connected users.
• Other bug fixes and small changes.

Full support of Single Sign Out feature for connected users (#2014)

The auth_oidc plugin now provides an endpoint which Microsoft services can request to trigger the logout of the connected Moodle users from Microsoft. The URL is https://url.to.moodle/auth/oidc/logout.php, and it can be configured in the "Front-channel logout URL" setting of Azure app.

Bug fixes and small changes

• Improved support for matching users by email in the user sync task. (#2034, thanks to @phager-at)
• Bug fix to prevent unexpected user suspension when full user sync fails. (#2048)
• More flexible schedule options to run user suspension/deletion part of the user sync task. (#2023)
• Bug fix on whether profile photo sync needs to run in the user sync task. (#1898)
• Fix broken unit tests. (#2018)
• Add missing delegated permissions required to configure multi-tenancy to PowerShell script and permission check.
• Update SDS sync feature to work with incomplete Graph API responses in user profile sync.
• Move deploying bot button image to image folder of local_o365 from external sources.

Release 3.11.4 for Moodle 3.11

Release 3.11.4 of Microsoft plugins for Moodle 3.11.

This release contains:

• Full support of Single Sign Out feature for connected users.
• Other bug fixes and small changes.

Full support of Single Sign Out feature for connected users (#2014)

The auth_oidc plugin now provides an endpoint which Microsoft services can request to trigger the logout of the connected Moodle users from Microsoft. The URL is https://url.to.moodle/auth/oidc/logout.php, and it can be configured in the "Front-channel logout URL" setting of Azure app.

Bug fixes and small changes

• Improved support for matching users by email in the user sync task. (#2034, thanks to @phager-at)
• Bug fix to prevent unexpected user suspension when full user sync fails. (#2048)
• More flexible schedule options to run user suspension/deletion part of the user sync task. (#2023)
• Bug fix on whether profile photo sync needs to run in the user sync task. (#1898)
• Fix broken unit tests. (#2018, #2033)
• Bug fix in observer definition. (#2040)
• Remove Teams app ID detection dependancy on course sync enable status.
• Add missing delegated permissions required to configure multi-tenancy to PowerShell script and permission check.
• Update SDS sync feature to work with incomplete Graph API responses in user profile sync.
• Add help text about Teams app provisioning when bot feature is enabled.
• Move deploying bot button image to image folder of local_o365 from external sources.