#This is part of the 5.2.0 release of the Microsoft 365 Moodle plugin suite for Moodle 5.2, version v20260707_m502#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260707_m502

This is the initial release of the auth_oidc plugin for Moodle 5.2.
The release is based on 5.1.2 release.

This is part of the 5.1.2 release of the Microsoft 365 Moodle plugin suite for Moodle 5.1, version v20260521_m501

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260521_m501

Changes in this release:

• Make auth_oidc plugin settings searchable.


• Use \core\context* classes to replace context_* classes, as per changes in core Moodle.


• Use \core\url class to replace moodle_url class.


• Improve control on custom icon display on login page.


• Handle login-as and redirect URI for non-Microsoft IdP in post logout redirect URI feature in auth_oidc.


• Force redirect does not occur on logout detected by JS.


• Force Moodle guest user logout before SSO starts.


• Fix a bug in the logic to determine if username has changed.


• Support field mapping from custom binding token claim.


• Update auth code validation according to RFC 6749.


• Add unique constraint to the combination of "oidcuniqid" and "resource" fields in auth_oidc_token table.


• Save wantsurl in OIDC state data.


• Remove referencing to local_o365 language strings from auth_oidc when local_o365 is not installed.


• Update README, SECURITY and CODE_OF_CONDUCT files.

This is part of the 5.0.6 release of the Microsoft 365 Moodle plugin suite for Moodle 5.0, version v20260521_m500

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260521_m500

Changes in this release:

• Make auth_oidc plugin settings searchable.


• Use \core\context* classes to replace context_* classes, as per changes in core Moodle.


• Use \core\url class to replace moodle_url class.


• Improve control on custom icon display on login page.


• Handle login-as and redirect URI for non-Microsoft IdP in post logout redirect URI feature in auth_oidc.


• Force redirect does not occur on logout detected by JS.


• Force Moodle guest user logout before SSO starts.


• Fix a bug in the logic to determine if username has changed.


• Support field mapping from custom binding token claim.


• Update auth code validation according to RFC 6749.


• Add unique constraint to the combination of "oidcuniqid" and "resource" fields in auth_oidc_token table.


• Save wantsurl in OIDC state data.


• Remove referencing to local_o365 language strings from auth_oidc when local_o365 is not installed.


• Update README, SECURITY and CODE_OF_CONDUCT files.

This is part of the 4.5.7 release of the Microsoft 365 Moodle plugin suite for Moodle 4.5, version v20260521_m405

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260521_m405

Changes in this release:

• Make auth_oidc plugin settings searchable.


• Use \core\context* classes to replace context_* classes, as per changes in core Moodle.


• Use \core\url class to replace moodle_url class.


• Improve control on custom icon display on login page.


• Handle login-as and redirect URI for non-Microsoft IdP in post logout redirect URI feature in auth_oidc.


• Force redirect does not occur on logout detected by JS.


• Force Moodle guest user logout before SSO starts.


• Fix a bug in the logic to determine if username has changed.


• Support field mapping from custom binding token claim.


• Update auth code validation according to RFC 6749.


• Add unique constraint to the combination of "oidcuniqid" and "resource" fields in auth_oidc_token table.


• Save wantsurl in OIDC state data.


• Remove referencing to local_o365 language strings from auth_oidc when local_o365 is not installed.


• Update README, SECURITY and CODE_OF_CONDUCT files.

This is part of the 5.1.1 release of the Microsoft 365 Moodle plugin suite for Moodle 5.1, version v20260423_m501

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m501

Changes in this release:

• Allow use custom claims from token.


• Protect the secret / certificate passphrase of the IdP OIDC / OAuth2 app in the plugin settings.


• Fix time inconsistency, avoid using $USER in unit test.


• Fix wrong config name used for custom binding username claim.


• Fix misspelled variable name in auth_oidc.


• Prevent creating duplicate auth_oidc_token records with same username.


• Add trigger to auth_oidc/event/user_created when new auth_oidc accounts are created from successful authentication.

This is part of the 5.0.5 release of the Microsoft 365 Moodle plugin suite for Moodle 5.0, version v20260423_m500

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m500

Changes in this release:

• Allow use custom claims from token.


• Protect the secret / certificate passphrase of the IdP OIDC / OAuth2 app in the plugin settings.


• Fix time inconsistency, avoid using $USER in unit test.


• Fix wrong config name used for custom binding username claim.


• Fix misspelled variable name in auth_oidc.


• Prevent creating duplicate auth_oidc_token records with same username.


• Add trigger to auth_oidc/event/user_created when new auth_oidc accounts are created from successful authentication.

This is part of the 4.5.6 release of the Microsoft 365 Moodle plugin suite for Moodle 4.5, version v20260423_m405

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260423_m405

Changes in this release:

• Allow use custom claims from token.


• Protect the secret / certificate passphrase of the IdP OIDC / OAuth2 app in the plugin settings.


• Fix time inconsistency, avoid using $USER in unit test.


• Fix wrong config name used for custom binding username claim.


• Fix misspelled variable name in auth_oidc.


• Prevent creating duplicate auth_oidc_token records with same username.


• Add trigger to auth_oidc/event/user_created when new auth_oidc accounts are created from successful authentication.

#This is part of the 5.1.0 release of the Microsoft 365 Moodle plugin suite for Moodle 5.1, version v20260210_m501#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20260210_m501

This is the initial release of the auth_oidc plugin for Moodle 5.1.
The release is based on 5.0.4 release.

This is part of the 5.0.4 release of the Microsoft 365 Moodle plugin suite for Moodle 5.0, version v20251223_m500#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20251223_m500

Changes included in this release:

• Fix Moodle CI integration reported errors.

This is part of the 4.5.5 release of the Microsoft 365 Moodle plugin suite for Moodle 4.5, version v20251223_m405#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20251223_m405

Changes included in this release:

• Fix Moodle CI integration reported errors.

This is part of the 5.0.2 release of the Microsoft 365 Moodle plugin suite for Moodle 5.0, version v20251209_m500#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20251209_m500

Changes included in this release:

• Latest version of auth_oidc is not GDPR compliant.


• Custom claim not displaying.


• The value of oidcusername in auth_oidc_token does not change when using the feature support UPN change.

This is part of the 4.5.3 release of the Microsoft 365 Moodle plugin suite for Moodle 4.5, version v20251209_m405#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20251209_m405

Changes included in this release:

• Fix a bug in action_failed event class get_description() function return data type.


• Latest version of auth_oidc is not GDPR compliant.


• Custom claim not displaying.


• The value of oidcusername in auth_oidc_token does not change when using the feature support UPN change.

This is part of the 4.4.4 release of the Microsoft 365 Moodle plugin suite for Moodle 4.4, version v20251209_m404#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20251209_m404

Changes included in this release:

• Fix a bug in action_failed event class get_description() function return data type.


• Latest version of auth_oidc is not GDPR compliant.


• Custom claim not displaying.


• The value of oidcusername in auth_oidc_token does not change when using the feature support UPN change.

This is part of the 4.1.12 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20251209_m401#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20251209_m401

Changes included in this release:

• Avoid using dynamic property since it's deprecated in PHP 8.2+.


• Fix a bug in action_failed event class get_description() function return data type.


• Latest version of auth_oidc is not GDPR compliant.


• Custom claim not displaying.


• The value of oidcusername in auth_oidc_token does not change when using the feature support UPN change.

#This is part of the 5.0.0 release of the Microsoft 365 Moodle plugin suite for Moodle 5.0, version v20250929_m500#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250929_m500

This is the initial release of the auth_oidc plugin for Moodle 5.0.
The release is based on 4.5.2 release.

Changes included in this release:

• Fix a bug in action_failed event class get_description() function return data type.

This is part of the 4.5.2 release of the Microsoft 365 Moodle plugin suite for Moodle 4.5, version v20250303_m405#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250303_m405

Changes included in this release:

• Fix an issue that causes excessive memory usage in auth_oidc upgrade script.

This is part of the 4.4.3 release of the Microsoft 365 Moodle plugin suite for Moodle 4.4, version v20250303_m404#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250303_m404

Changes included in this release:

• Fix an issue that causes excessive memory usage in auth_oidc upgrade script.

This is part of the 4.3.8 release of the Microsoft 365 Moodle plugin suite for Moodle 4.3, version v20250303_m403#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250303_m403

Changes included in this release:

• Fix an issue that causes excessive memory usage in auth_oidc upgrade script.

This is part of the 4.1.11 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20250303_m401#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250303_m401

Changes included in this release:

• Fix an issue that causes excessive memory usage in auth_oidc upgrade script.

This is part of the 4.5.1 release of the Microsoft 365 Moodle plugin suite for Moodle 4.5, version v20250226_m405#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250226_m405

Changes included in this release:

• Fix Moodle plugin CI warnings and errors.


• Add GitHub and GitLab Moodle plugin CI integration to individual plugin repos.


• Update individual plugin repo pull request template.


• Handle empty binding username claim configuration.


• Handle front-channel logout URL visits from multiple user sessions.


• Change setting name support_upn_change to support_user_identifier_change in auth_oidc.


• Move debug backtrace of auth_oidc error details from Moodle log to PHP error log.


• Update Token Endpoint hint for IdP type v2.0.


• Bug fix in saving custom icon in auth_oidc.


• Remove use of common auth and token endpoints as default because they don't work in Microsoft identity platform (v2.0) IdP.

This is part of the 4.4.2 release of the Microsoft 365 Moodle plugin suite for Moodle 4.4, version v20250226_m404#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250226_m404

Changes included in this release:

• Fix Moodle plugin CI warnings and errors.


• Add GitHub and GitLab Moodle plugin CI integration to individual plugin repos.


• Update individual plugin repo pull request template.


• Handle empty binding username claim configuration.


• Handle front-channel logout URL visits from multiple user sessions.


• Change setting name support_upn_change to support_user_identifier_change in auth_oidc.


• Move debug backtrace of auth_oidc error details from Moodle log to PHP error log.


• Update Token Endpoint hint for IdP type v2.0.


• Bug fix in saving custom icon in auth_oidc.


• Remove use of common auth and token endpoints as default because they don't work in Microsoft identity platform (v2.0) IdP.

This is part of the 4.3.7 release of the Microsoft 365 Moodle plugin suite for Moodle 4.3, version v20250226_m403#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250226_m403

Changes included in this release:

• Fix Moodle plugin CI warnings and errors.


• Add GitHub and GitLab Moodle plugin CI integration to individual plugin repos.


• Update individual plugin repo pull request template.


• Handle empty binding username claim configuration.


• Handle front-channel logout URL visits from multiple user sessions.


• Change setting name support_upn_change to support_user_identifier_change in auth_oidc.


• Move debug backtrace of auth_oidc error details from Moodle log to PHP error log.


• Update Token Endpoint hint for IdP type v2.0.


• Bug fix in saving custom icon in auth_oidc.


• Remove use of common auth and token endpoints as default because they don't work in Microsoft identity platform (v2.0) IdP.

This is part of the 4.1.10 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20250226_m401#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20250226_m401

Changes included in this release:

• Fix Moodle plugin CI warnings and errors.


• Add GitHub and GitLab Moodle plugin CI integration to individual plugin repos.


• Update individual plugin repo pull request template.


• Handle empty binding username claim configuration.


• Handle front-channel logout URL visits from multiple user sessions.


• Change setting name support_upn_change to support_user_identifier_change in auth_oidc.


• Move debug backtrace of auth_oidc error details from Moodle log to PHP error log.


• Update Token Endpoint hint for IdP type v2.0.


• Bug fix in saving custom icon in auth_oidc.


• Remove use of common auth and token endpoints as default because they don't work in Microsoft identity platform (v2.0) IdP.

#This is part of the 4.5.0 release of the Microsoft 365 Moodle plugin suite for Moodle 4.5, version v20241125_m405#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20241125_m405

This is the initial release of the auth_oidc plugin for Moodle 4.5.
The release is based on 4.4.1 release.

This is part of the 4.4.1 release of the Microsoft 365 Moodle plugin suite for Moodle 4.4, version v20241017_m404#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20241017_m404

The main feature included this release is supporting binding username token claim

• This feature allows Moodle site administrators to select the ID/access token claim to be used as Moodle username.


• This feature supports both Microsoft Entra ID and other OpenID Connect IdPs.


• Tools are provided to migrate existing Moodle accounts to use a different binding username token claim.


• The feature is sponsored by University College London (UCL) (https://ucl.ac.uk/).

Other changes included in this release:

• Bug fix in which user field mapping on login is skipped because of wrong config name check in comparing tenant.


• Create config changes log entries when updating configurations.


• Remove deprecated API functions from event classes.

This is part of the 4.3.6 release of the Microsoft 365 Moodle plugin suite for Moodle 4.3, version v20241017_m403#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20241017_m403

The main feature included this release is supporting binding username token claim

• This feature allows Moodle site administrators to select the ID/access token claim to be used as Moodle username.


• This feature supports both Microsoft Entra ID and other OpenID Connect IdPs.


• Tools are provided to migrate existing Moodle accounts to use a different binding username token claim.


• The feature is sponsored by University College London (UCL) (https://ucl.ac.uk/).

Other changes included in this release:

• Bug fix in which user field mapping on login is skipped because of wrong config name check in comparing tenant.


• Bug fix where clicking OIDC login button doesn't show Microsoft login page when silent login is turned on.


• Fix invalid link in auth_oidc settings updated notification message.


• Create config changes log entries when updating configurations.


• Remove deprecated API functions from event classes.


• Bug fix in auth_oidc unit test.


• Avoid using dynamic property since it's deprecated in PHP 8.2+.

This is part of the 4.2.8 release of the Microsoft 365 Moodle plugin suite for Moodle 4.2, version v20241017_m402#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20241017_m402

This is the final release for Moodle 4.2 since feature and security support for Moodle 4.2 in core Moodle has stopped.

The main feature included this release is supporting binding username token claim

• This feature allows Moodle site administrators to select the ID/access token claim to be used as Moodle username.


• This feature supports both Microsoft Entra ID and other OpenID Connect IdPs.


• Tools are provided to migrate existing Moodle accounts to use a different binding username token claim.


• The feature is sponsored by University College London (UCL) (https://ucl.ac.uk/).

Other changes included in this release:

• Bug fix in which user field mapping on login is skipped because of wrong config name check in comparing tenant.


• Bug fix where clicking OIDC login button doesn't show Microsoft login page when silent login is turned on.


• Fix invalid link in auth_oidc settings updated notification message.


• Create config changes log entries when updating configurations.


• Remove deprecated API functions from event classes.


• Bug fix in auth_oidc unit test.


• Avoid using dynamic property since it's deprecated in PHP 8.2+.

This is part of the 4.1.9 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20241017_m401#

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20241017_m401

The main feature included this release is supporting binding username token claim

• This feature allows Moodle site administrators to select the ID/access token claim to be used as Moodle username.


• This feature supports both Microsoft Entra ID and other OpenID Connect IdPs.


• Tools are provided to migrate existing Moodle accounts to use a different binding username token claim.


• The feature is sponsored by University College London (UCL) (https://ucl.ac.uk/).

Other changes included in this release:

• Bug fix in which user field mapping on login is skipped because of wrong config name check in comparing tenant.


• Bug fix where clicking OIDC login button doesn't show Microsoft login page when silent login is turned on.


• Fix invalid link in auth_oidc settings updated notification message.


• Create config changes log entries when updating configurations.


• Remove deprecated API functions from event classes.


• Bug fix in auth_oidc unit test.

#This is part of the 4.4.0 release of the Microsoft 365 Moodle plugin suite for Moodle 4.4, version v20240722_m404#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240722_m404

This is the initial release of the auth_oidc plugin for Moodle 4.4.
The release is based on 4.3.4 release, with some bug fixes.

Bug fixes in this release

• Fix invalid link in auth_oidc settings updated notification message.


• Fix a bug where clicking OIDC login button doesn't show Microsoft login page when silent login is turned on.


• Avoid using dynamic property since it's deprecated in PHP 8.2+.


• Bug fix in auth_oidc unit test.

#This is part of the 4.3.4 release of the Microsoft 365 Moodle plugin suite for Moodle 4.3, version v20240702_m403#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240702_m403

The main feature included this release is support for silent SSO

Silent login mode automatically detects active Microsoft user sessions in client browser, and would login the user silently (without user interaction) if a non-ambiguous user session if found. Otherwise it would show Moodle login page and allows users to choose the most appropriate login method.

Other changes included in this release are:

• Fix bug missing class import 'action_failed' in utils.php in auth_oidc plugin.

#This is part of the 4.2.6 release of the Microsoft 365 Moodle plugin suite for Moodle 4.2, version v20240702_m402#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240702_m402

The main feature included this release is support for silent SSO

Silent login mode automatically detects active Microsoft user sessions in client browser, and would login the user silently (without user interaction) if a non-ambiguous user session if found. Otherwise it would show Moodle login page and allows users to choose the most appropriate login method.

Other changes included in this release are:

• Fix bug missing class import 'action_failed' in utils.php in auth_oidc plugin.

#This is part of the 4.1.7 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20240702_m401#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240702_m401

The main feature included this release is support for silent SSO

Silent login mode automatically detects active Microsoft user sessions in client browser, and would login the user silently (without user interaction) if a non-ambiguous user session if found. Otherwise it would show Moodle login page and allows users to choose the most appropriate login method.

Other changes included in this release are:

• Fix bug missing class import 'action_failed' in utils.php in auth_oidc plugin.

#This is part of the 4.3.3 release of the Microsoft 365 Moodle plugin suite for Moodle 4.3, version v20240412_m403.#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240412_m403

Changes included in this release are:

• Add manual set support to auth_oidc.

#This is part of the 4.2.5 release of the Microsoft 365 Moodle plugin suite for Moodle 4.2, version v20240412_m402.#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240412_m402

Changes included in this release are:

• Add manual set support to auth_oidc.

#This is part of the 4.1.5 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20240412_m401.#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240412_m401

Changes included in this release are:

• Add manual set support to auth_oidc.

#This is part of the 4.3.1 release of the Microsoft 365 Moodle plugin suite for Moodle 4.3, version v20240311_m403.#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240311_m403

The major features / changes included in this release of the auth_oidc plugin are:

• Use Client Certificate Path for app authentication.


• Rename Azure AD to Microsoft Entra ID.

Other changes in the auth_oidc plugin in this release include:

• Bug fix in processing email sync from token.


• Add configuration to control secret expiry email recipients.


• Allow user creation restriction by Microsoft group ID in user sync.


• Bug fix in getting email field from token.


• Handle oauth2 v2.0 token that don't have "resource" and "expires_on" attributes.


• Add styling to certificate private and public key text.


• Update auth_oidc configuration page validation and redirect rule.


• Clean up and unify exceptions usage across the plugins.

#This is part of the 4.2.3 release of the Microsoft 365 Moodle plugin suite for Moodle 4.2, version v20240311_m402.#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240311_m402

The major features / changes included in this release of the auth_oidc plugin are:

• Use Client Certificate Path for app authentication.


• Rename Azure AD to Microsoft Entra ID.

Other changes in the auth_oidc plugin in this release include:

• Bug fix in processing email sync from token.


• Add configuration to control secret expiry email recipients.


• Allow user creation restriction by Microsoft group ID in user sync.


• Bug fix in getting email field from token.


• Handle oauth2 v2.0 token that don't have "resource" and "expires_on" attributes.


• Add styling to certificate private and public key text.


• Update auth_oidc configuration page validation and redirect rule.


• Clean up and unify exceptions usage across the plugins.

#This is part of the 4.1.4 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20240311_m401.#
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20240311_m401

The major features / changes included in this release of the auth_oidc plugin are:

• Use Client Certificate Path for app authentication.


• Rename Azure AD to Microsoft Entra ID.

Other changes in the auth_oidc plugin in this release include:

• Bug fix in processing email sync from token.


• Add configuration to control secret expiry email recipients.


• Allow user creation restriction by Microsoft group ID in user sync.


• Bug fix in getting email field from token.


• Handle oauth2 v2.0 token that don't have "resource" and "expires_on" attributes.


• Add styling to certificate private and public key text.


• Update auth_oidc configuration page validation and redirect rule.


• Clean up and unify exceptions usage across the plugins.

This is part of the 4.3.0 release of the Microsoft 365 Moodle plugin suite for Moodle 4.3, version v20231218_m403.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20231218_m403

This is the initial release of the plugin for Moodle 4.3.

This is part of the 4.2.2 release of the Microsoft 365 Moodle plugin suite for Moodle 4.2, version v20231010_m402.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20231010_m402

The main feature introduced in this release is the support to Microsoft account UPN changes. The feature is described at https://docs.moodle.org/402/en/Microsoft_365#Support_Microsoft_account_UPN_changes.

Other changes in the auth_oidc plugin in this release include:

• Support samaccountname in field mapping.


• Use "sub" instead of "oid" claim for "objectId" field in non-Azure IdP.


• Add missing configuration setting language string.

This is part of the 4.1.3 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20231010_m401.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20231010_m401

The main feature introduced in this release is the support to Microsoft account UPN changes. The feature is described at https://docs.moodle.org/402/en/Microsoft_365#Support_Microsoft_account_UPN_changes.

Other changes in the auth_oidc plugin in this release include:

• Support samaccountname in field mapping.


• Use "sub" instead of "oid" claim for "objectId" field in non-Azure IdP.


• Add missing configuration setting language string.

This is part of the 4.0.5 release of the Microsoft 365 Moodle plugin suite for Moodle 4.0, version v20231010_m400.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20231010_m400

The main feature introduced in this release is the support to Microsoft account UPN changes. The feature is described at https://docs.moodle.org/402/en/Microsoft_365#Support_Microsoft_account_UPN_changes.

Other changes in the auth_oidc plugin in this release include:

• Support samaccountname in field mapping.


• Use "sub" instead of "oid" claim for "objectId" field in non-Azure IdP.


• Add missing configuration setting language string.

This is part of the 4.0.4 release of the Microsoft 365 Moodle plugin suite for Moodle 4.0, version v20230628_m400.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20230628_m400

Changes in the auth_oidc plugin in this release include:

• Support Microsoft user UPN changes.


• Support samaccountname in field mapping.


• Use "sub" instead of "oid" claim for "objectId" field in non-Azure IdP.

This is part of the 4.2.0 release of the Microsoft 365 Moodle plugin suite for Moodle 4.2, version v20230525_m402.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20230525_m402

This is part of the 4.1.1 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20230228_m401.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20230228_m401

Changes in the auth_oidc plugin in this release include:

• Remove unnecessary configuration "Tenant name or GUID" from auth_oidc plugin.


• Show notification to provide admin consent only if local_o365 is installed.


• Handle objectId not present in token when syncing user profile field from token.


• Handle error decoding tokens for non-Azure IdP.

This is part of the 4.0.3 release of the Microsoft 365 Moodle plugin suite for Moodle 4.0, version v20230228_m400.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20230228_m400

Changes in the auth_oidc plugin in this release include:

• Support sync of "manager email" field.


• Fix an issue where users created from auth_oidc login doesn't obey "allow accounts with same email".


• Fix typos.


• Fix a bug in which "oidcresource" and "oidcscope" configuration in auth_oidc are not saved.


• Remove unnecessary configuration "Tenant name or GUID" from auth_oidc plugin.


• Show notification to provide admin consent only if local_o365 is installed.


• Handle objectId not present in token when syncing user profile field from token.


• Handle error decoding tokens for non-Azure IdP.

This is part of the 3.11.6 release of the Microsoft 365 Moodle plugin suite for Moodle 3.11, version v20230228_m311.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20230228_m311

This is the final release of the Microsoft plugins for Moodle 3.11 since support for Moodle 3.11 has ended. No bug fix or feature updates will be made to this version.

Changes in the auth_oidc plugin in this release include:

• Support sync of "manager email" field.


• Fix an issue where users created from auth_oidc login doesn't obey "allow accounts with same email".


• Fix typos.


• Fix a bug in which "oidcresource" and "oidcscope" configuration in auth_oidc are not saved.


• Remove unnecessary configuration "Tenant name or GUID" from auth_oidc plugin.


• Show notification to provide admin consent only if local_o365 is installed.


• Handle objectId not present in token when syncing user profile field from token.


• Handle error decoding tokens for non-Azure IdP.

This is part of the 4.1.0 release of the Microsoft 365 Moodle plugin suite for Moodle 4.1, version v20221128_m41.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20221128_m41

Changes in the auth_oidc plugin in this release include:

• Make "Tenant name or GUID" configuration non-mandatory for non-Azure IdP types.


• Fix an issue where users created from auth_oidc login doesn't obey "allow accounts with same email".


• Fix a bug in which "oidcresource" and "oidcscope" configuration in auth_oidc are not saved


• Fix typo.

This is part of the 4.0.2 release of the Microsoft 365 Moodle plugin suite for Moodle 4.0, version v20221012_m40.

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20221012_m40

Changes in the auth_oidc plugin in this release include:

• Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication


• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping.


• Support the use of filters in auth_oidc opname setting.


• Add Microsoft SECURITY.MD.

This is part of the 3.11.5 release of the Microsoft 365 Moodle plugin suite for Moodle 3.11, version v20221012_m311.

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20221012_m311

Changes in the auth_oidc plugin in this release include:

• Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication


• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping.


• Support the use of filters in auth_oidc opname setting.


• Add Microsoft SECURITY.MD.

This is part of the 3.10.8 release of the Microsoft 365 Moodle plugin suite for Moodle 3.10, version v20221006_m310.

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20221006_m310

Changes in the auth_oidc plugin in this release include:

• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping.

This is part of the 3.9.11 release of the Microsoft 365 Moodle plugin suite for Moodle 3.9, version v20221006_m39.

Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20221006_m39

Changes in the auth_oidc plugin in this release include:

• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping.

This is part of the 4.0.1 release of the Microsoft 365 Moodle plugin suite for Moodle 4.0, version v20220621_m40.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220621_m40

Changes in the auth_oidc plugin in this release include:

• Full support of Single Sign Out feature for connected users.

This is part of the 3.11.4 release of the Microsoft 365 Moodle plugin suite for Moodle 3.11, version v20220621_m311.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220621_m311

Changes in the auth_oidc plugin in this release include:

• Full support of Single Sign Out feature for connected users.

This is part of the 3.10.7 release of the Microsoft 365 Moodle plugin suite for Moodle 3.10, version v20220621_m310.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220621_m310

Changes in the auth_oidc plugin in this release include:

• Full support of Single Sign Out feature for connected users.

This is part of the 3.9.10 release of the Microsoft 365 Moodle plugin suite for Moodle 3.9, version v20220621_m39.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220621_m39

Changes in the auth_oidc plugin in this release include:

• Full support of Single Sign Out feature for connected users.

This is part of the 4.0.0 release of the Microsoft 365 Moodle plugin suite for Moodle 4.0, version v20220512_m40.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220512_m40

This is part of the 3.11.3 release of the Microsoft 365 Moodle plugin suite for Moodle 3.11, version v20220411_m311.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220411_m311

Changes in the auth_oidc plugin in this release include:

• Force field mapping of email profile field to avoid users being created without email and cannot update own email.


• Bug fix in applying user field mappings for installations with only auth_oidc and not local_o365.

This is part of the 3.10.6 release of the Microsoft 365 Moodle plugin suite for Moodle 3.10, version v20220411_m310.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220411_m310

Changes in the auth_oidc plugin in this release include:

• Force field mapping of email profile field to avoid users being created without email and cannot update own email.


• Bug fix in applying user field mappings for installations with only auth_oidc and not local_o365.

This is part of the 3.9.9 release of the Microsoft 365 Moodle plugin suite for Moodle 3.9, version v20220411_m39.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20220411_m39

Changes in the auth_oidc plugin in this release include:

• Force field mapping of email profile field to avoid users being created without email and cannot update own email.


• Bug fix in applying user field mappings for installations with only auth_oidc and not local_o365.

This is the final feature and general bug release for the plugin for Moodle 3.9.
Bug fixes for security issues for Moodle 3.9 versions will continue until 8 May 2023.

This is part of the 3.9.8 release of the Microsoft 365 Moodle plugin suite for Moodle 3.9, version v20211207_m39.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20211207_m39

Changes in auth_oidc plugin in this release include:

• Support profile field sync from SDS.


• Limit logout redirect in Single Sign Off feature to only users who are connected to Microsoft 365.


• Bug fix in user login integration with additional tenant (i.e. the multi tenant feature).


• Bug fix in cleanup token tool display.


• Fix broken unit tests.


• General cleanup.

This is part of the 3.11.2 release of the Microsoft 365 Moodle plugin suite for Moodle 3.11, version v20211207_m311.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20211207_m311

Changes in auth_oidc plugin in this release include:

• Support profile field sync from SDS.


• Limit logout redirect in Single Sign Off feature to only users who are connected to Microsoft 365.


• Bug fix in user login integration with additional tenant (i.e. the multi tenant feature).


• Bug fix in cleanup token tool display.


• Fix broken unit tests.


• General cleanup.

This is part of the 3.10.5 release of the Microsoft 365 Moodle plugin suite for Moodle 3.10, version v20211207_m310.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20211207_m310

Changes in auth_oidc plugin in this release include:

• Support profile field sync from SDS.


• Limit logout redirect in Single Sign Off feature to only users who are connected to Microsoft 365.


• Bug fix in user login integration with additional tenant (i.e. the multi tenant feature).


• Bug fix in cleanup token tool display.


• Fix broken unit tests.


• General cleanup.

This is the final feature and general bug release for the plugin for Moodle 3.9.
Bug fixes for security issues for Moodle 3.9 versions will continue until 8 May 2023.

This is part of the 3.9.8 release of the Microsoft 365 Moodle plugin suite for Moodle 3.9, version v20211207_m39.
Complete Release Note: https://github.com/microsoft/o365-moodle/releases/tag/v20211207_m39

Changes in auth_oidc plugin in this release include:

• Support profile field sync from SDS.


• Limit logout redirect in Single Sign Off feature to only users who are connected to Microsoft 365.


• Bug fix in user login integration with additional tenant (i.e. the multi tenant feature).


• Bug fix in cleanup token tool display.


• Fix broken unit tests.


• General cleanup.

This is part of the 3.11.1 release of the Microsoft 365 Moodle plugin suite for Moodle 3.11, version v20211026_m311.
Complete Release Note

The most significant change in this release is moving the user field mapping feature from the local_o365 plugin to the auth_oidc plugin, and integrate it with the Moodle default field mapping feature.

• All previous settings are automatically migrated.


• The remote fields available for mapping depend on whether the local_o365 plugin is configured on the Moodle site - if it's not configured, only profile fields available in user ID token can be mapped; otherwise many other fields returned in Graph API calls can be mapped.


• After the move, some native Moodle user profile mapping features, such as field locking, can be applied.

Other changes include:

• Fix a bug in auth_oidc in which a user profile is not updated from ID token in some cases.


• Fix wrong cleanup token URL.


• Improve login error message display to end users in auth_oidc.

This is part of the 3.10.4 release of the Microsoft 365 Moodle plugin suite for Moodle 3.10, version v20211026_m310.
Complete Release Note

The most significant change in this release is moving the user field mapping feature from the local_o365 plugin to the auth_oidc plugin, and integrate it with the Moodle default field mapping feature.

• All previous settings are automatically migrated.


• The remote fields available for mapping depend on whether the local_o365 plugin is configured on the Moodle site - if it's not configured, only profile fields available in user ID token can be mapped; otherwise many other fields returned in Graph API calls can be mapped.


• After the move, some native Moodle user profile mapping features, such as field locking, can be applied.

Other changes include:

• Fix a bug in auth_oidc in which a user profile is not updated from ID token in some cases.


• Fix wrong cleanup token URL.


• Improve login error message display to end users in auth_oidc.

This is part of the 3.9.7 release of the Microsoft 365 Moodle plugin suite for Moodle 3.9, version v20211026_m39.
Complete Release Note

The most significant change in this release is moving the user field mapping feature from the local_o365 plugin to the auth_oidc plugin, and integrate it with the Moodle default field mapping feature.

• All previous settings are automatically migrated.


• The remote fields available for mapping depend on whether the local_o365 plugin is configured on the Moodle site - if it's not configured, only profile fields available in user ID token can be mapped; otherwise many other fields returned in Graph API calls can be mapped.


• After the move, some native Moodle user profile mapping features, such as field locking, can be applied.

Other changes include:

• Fix a bug in auth_oidc in which a user profile is not updated from ID token in some cases.


• Fix wrong cleanup token URL.


• Improve login error message display to end users in auth_oidc.

This release is part of the Office 365 Moodle plugin suite for Moodle 3.11, version v20210901_m311
Complete Release Note

This release is part of the Office 365 Moodle plugin suite for Moodle 3.10, version v20210629_m310
Complete Release Note

This is the final feature and general bug release for the plugin for Moodle 3.9.
Bug fixes for security issues for Moodle 3.9 versions will continue until 8 May 2023.

This release is part of the Office 365 Moodle plugin suite for Moodle 3.9, version v20210629_m39
Complete Release Note

This release is part of the Office 365 Moodle plugin suite for Moodle 3.10, version v20210326_m310
Complete Release Note

This release is part of the Office 365 Moodle plugin suite for Moodle 3.9, version v20210326_m39
Complete Release Note

This release is part of the Office 365 Moodle plugin suite for Moodle 3.10, version v20210128_m310
Complete Release Note

This release is part of the Office 365 Moodle plugin suite for Moodle 3.9, version v20210128_m39
Complete Release Note

Office 365 and Azure Active Directory Plugins for Moodle

OpenID Connect Authentication Plugin.

The OpenID Connect plugin provides single-sign-on functionality using configurable identity providers.

This is part of the suite of Office 365 plugins for Moodle.

This repository is updated with stable releases. To follow active development, see: https://github.com/Microsoft/o365-moodle

Installation

1. Unpack the plugin into /auth/oidc within your Moodle install.


2. From the Moodle Administration block, expand Site Administration and click "Notifications".


3. Follow the on-screen instuctions to install the plugin.


4. To configure the plugin, from the Moodle Administration block, go to Site Administration > Plugins > Authentication > Manage Authentication.


5. Click the icon to enable the plugin, then visit the settings page to configure the plugin. Follow the directions below each setting.

For more documentation, visit https://docs.moodle.org/34/en/Office365

For more information including support and instructions on how to contribute, please see: https://github.com/Microsoft/o365-moodle/blob/master/README.md

Issues and Contributing

Please post issues for this plugin to: https://github.com/Microsoft/o365-moodle/issues/
Pull requests for this plugin should be submitted against our main repository: https://github.com/Microsoft/o365-moodle

Copyright

© Microsoft, Inc. Code for this plugin is licensed under the GPLv3 license.

Any Microsoft trademarks and logos included in these plugins are property of Microsoft and should not be reused, redistributed, modified, repurposed, or otherwise altered or used outside of this plugin.

This release is part of the Office 365 Moodle plugin suite for Moodle 3.9, version v20200716_m39
Complete Release Note