social_auth_entra_id 2.0.0

New Features

Microsoft Personal Account Support

• Account Type Configuration: Choose organization-only, common (organization + personal), or consumers-only (personal accounts).
• Dynamic Endpoint Routing: Automatic OAuth endpoint selection based on the configured account type.
• Flexible Issuer Validation: Validation adapts for personal accounts while maintaining security standards.

Admin Experience Improvements

• Callback URL Display: Read-only field showing the OAuth redirect URI.
• Azure Portal Mapping: Clear mapping between module settings and Azure AD “Supported account types”.
• Flexible Domain Input: Supports comma-separated or newline-separated domain entries.
• Enhanced Help Text: Improved documentation and Azure AD setup guidance.

OAuth Reliability

• User.Read Scope: Explicitly requested to ensure profile access.
• Optional Microsoft Graph API: Graceful fallback if the /me endpoint fails.
• Session Persistence: OAuth parameters are stored and reused to prevent mismatches.

Code Quality

• Drupal Coding Standards: Fully compliant with phpcs and phpcbf.
• Enhanced Documentation: Over 500 lines of inline developer comments.
• Input Validation: Proper sanitization and validation throughout the module.

Upgrade Path

• From 1.0.0 to 2.0.0: Direct upgrade with no breaking changes. Review and update the configurations

Post-Upgrade Steps

1. Review the new Account Type setting at /admin/config/services/entra-id/settings.
2. Consider enabling administrator protection options:
   • Block user 1 from SSO login
   • Block administrator role from SSO login
3. Test the OAuth flow to ensure successful authentication.

Azure AD Configuration

To support personal Microsoft accounts, update your Azure app registration:

• Supported account types: Accounts in any organizational directory and personal Microsoft accounts
• Or Personal Microsoft accounts only for consumers-only mode