Friederich Loheide cc88f145f2 Match accounts by mail address and user principal name ... Sign-in and sync only used the first address (the mail attribute). A WordPress account that carries the user principal name while the Microsoft mail differs was not found at sign-in ("no WordPress account") and the sync created a duplicate account for it. Both now try the mail address and then the user principal name (UPN only for members, only with the UPN fallback on, and only within the e-mail domain allow-list). Privileged accounts keep the stricter rule; a matching UPN is sufficient there as well. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>		2026-09-24 04:23:02 +00:00
..
class-m365-login-admin.php	Fix the findings of the third security audit	2026-09-24 03:52:13 +00:00
class-m365-login-auth.php	Match accounts by mail address and user principal name	2026-09-24 04:23:02 +00:00
class-m365-login-button.php	Fix the findings of the third security audit	2026-09-24 03:52:13 +00:00
class-m365-login-certificate.php	Fix the findings of the third security audit	2026-09-24 03:52:13 +00:00
class-m365-login-crypto.php	Fix the findings of a full second security audit	2026-09-23 17:10:30 +00:00
class-m365-login-graph.php	Fix the findings of the third security audit	2026-09-24 03:52:13 +00:00
class-m365-login-jwt.php	Add M365 Login plugin: Microsoft Entra ID sign-in for existing users	2026-09-22 14:21:10 +00:00
class-m365-login-settings.php	Fix the findings of the third security audit	2026-09-24 03:52:13 +00:00
class-m365-login-sync.php	Match accounts by mail address and user principal name	2026-09-24 04:23:02 +00:00
class-m365-login.php	Fix the findings of the third security audit	2026-09-24 03:52:13 +00:00
functions.php	Support custom login pages	2026-09-22 14:52:11 +00:00