Changelog

Updated the Jackson Core library to address a potential security vulnerability.

Added the ability to specify custom parameters in the Resource Owner Password Credentials (ROPC) request body. Learn more in step 3 in Configuring a password credential validator instance.

Updated the dependencies that the Azure AD Password Credential Validator uses.

Added the User Attributes Endpoint and Group Membership Endpoint fields in the PCV to allow customization of the user attributes and group membership endpoint URLs. Learn more in the Azure AD PCV instance configuration settings reference.

Added the Microsoft Login Base URL and Microsoft Token Endpoint fields in the PCV to support any changes Microsoft makes to the API endpoint. Learn more in the Azure AD PCV instance configuration settings reference.

Replaced the Read Timeout and Connection Timeout fields with the API Request Timeout field in the PCV. Learn more in the Azure AD PCV instance configuration settings reference.

Changed to a standardized .zip file structure to make automated deployments easier.

Improved support for passwords with special characters.

Added proxy connection override settings. Learn more in the advanced field descriptions in Azure AD PCV instance configuration settings reference.

Added the Read Timeout and Connection Timeout fields.

You can now disable user membership retrieval to reduce network traffic and API calls (in configurations where this data isn’t required). Learn more in the Disable User Group Retrieval field description in Azure AD PCV instance configuration settings reference.

Fixed an issue that prevented the PCV from properly failing over to the next PCV in the chain of an HTML form adapter.

Initial release.