Friederich Loheide 791f43a80b Add excluded Entra groups for the Microsoft sign-in ... New "Excluded Entra groups" card on the Security tab. Members of these groups (nested memberships count) can never sign in with Microsoft, even if they are in an allowed group. A hit in the ID token's groups claim refuses immediately. Otherwise the plugin always asks Microsoft Graph (checkMemberGroups), because a groups claim can be filtered in the app registration and cannot prove non-membership. Graph errors refuse the sign-in (fail closed). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>		2026-09-23 16:43:10 +00:00
..
security-audit.md	Add excluded Entra groups for the Microsoft sign-in	2026-09-23 16:43:10 +00:00
wordpress-org-einreichung.md	Add certificate authentication, in-app setup guides and security audit	2026-09-22 15:04:32 +00:00