Skip to content

2.17.0

Latest
Latest

Choose a tag to compare

View all tags
@ameyapat ameyapat released this 26 Oct 23:21
2.17.0
32a4d49
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Notes

Version 2.17.0

  • Behind the enable_mfa_activation_handoff flight (default OFF until ECS enables it), hand off trusted HTTPS Authenticator MFA activation links from the compliant iOS SSO extension using universal links only, instead of loading the website's App Store fallback. Finish the intercepted navigation's loading indicator while keeping authorization pending after the app opens, and surface handoff failures without relaxing non-HTTPS navigation policy.
  • Include previously excluded errors 50058, 50097, and 50126 in onboarding blocking-error telemetry for diagnostics.
  • Record the MDM enrollment-required blocking error on enrollment redirects and keep blocking errors unique and ordered by their latest occurrence.
  • Distinguish CA redirects from profile-download Phase 1 in onboarding telemetry and record native-observed Company Portal App Store handoffs as CPDownloadTriggered, preserving enrollment fwlink classification.
  • Normalize embedded Intune enrollment and compliance URLs to one in-app=true marker during the new mobile onboarding flow, preserving legacy enrollment defaults and caller-supplied values outside that flow.
  • Set client-request-id from the original request context on embedded Intune enrollment and compliance requests.
  • Propagate bound app refresh token requests through SSO extension broker token operations and cover the request flag's JSON serialization in tests.
  • Preserve a nonempty onboarding mode when a journey later enters Broker, while supplying brokered only as a fallback for legacy seeds without a usable mode.
  • Add an onboarding telemetry step for redirects to Defender during compliance remediation.
  • Add onboarding telemetry steps for successful and failed redirects to Defender during compliance remediation.
  • Add a reply-capable WebCP script handler and window.msidWebCP.postMessage wrapper to app-hosted iOS OAuth WebViews, including supplied WebViews. Restrict readiness to enrollment origins and skip bridge attachment when its disable flight is on, without changing Broker's existing script handler.

Changes:

  • #1983: [minor] [engg]: Release Common Core 2.17.0 to main
  • #1982: Update changelog
  • #1981: Harden CBA OAuth response validation
  • #1979: [patch] [bugfix]: Hand off MFA activation links from compliant iOS extensions
  • #1980: [patch][bugfix]: Preserve onboarding blocking-error telemetry
  • #1977: [patch][bugfix]: Align mobile onboarding telemetry and Intune redirect context
  • #1976: [minor][Feature]: Add a property in SSO extension triggered broker request indicating that calling app has requested BART
  • #1973: Preserve onboarding origin mode during broker finalization
  • #1971: [patch][feature]: Add Defender redirect failure telemetry step
  • #1972: [patch] [bugfix]: Revert SFRT default-on changes
See More
  • #1962: [patch] [bugfix]: Default SFRT on with disable_sfrt_v2 kill flight
  • #1970: [patch] [bugfix]: Restore CommonCore WebCP onboarding readiness bridge
  • #1969: [minor] [feature]: Add WebCP onboarding readiness WebKit bridge to CommonCore
  • #1963: [minor] [feature]: Add versioned WebCP onboarding readiness to CommonCore
  • #1960: [patch][feature]: Add Defender remediation telemetry step
  • #1965: [patch] [bugfix]: Default SFRT on with disable_sfrt_v2 kill flight (#…
  • #1959: Merge main in dev
  • #3: Create a shared constants file
  • #1: Move utils to common core
  • #2: Create a shared telemetry implementation

This list of changes was auto generated.

Assets 2
Loading