v2.32.0

FEATURES:

• New Data Source: azuread_directory_roles (#945)

IMPROVEMENTS:

• azuread_application - support the cloud_displayname optional claim (#967)

BUG FIXES:

• azuread_application - improve validation when checking for duplicate app roles and permission scopes (#971)

v2.31.0

IMPROVEMENTS:

• azuread_application - validation for identifier_uris to detect trailing slash with no path (#928)

BUG FIXES:

• data.azuread_application_template - work around an API bug in the US Government cloud, by using the beta API (#936)
• azuread_application - fix a bug where owners where not correctly removed (#916)
• azuread_application - work around an API bug in the US Government cloud, by using the beta API when template_id is specified (#936)

v2.30.0

FEATURES:

• New Resource: azuread_synchronization_job (#830)
• New Resource: azuread_synchronization_secret (#830)

v2.29.0

IMPROVEMENTS:

• Provider: support for the oidc_token_file_path property & ARM_OIDC_TOKEN_FILE_PATH environment variable (#897)
• data.azuread_service_principal - this resource now makes use of the MS Graph v1.0 API instead of the beta API (#896)
• azuread_service_principal - this resource now makes use of the MS Graph v1.0 API instead of the beta API (#896)

v2.28.1

BUG FIXES:

• Provider: fix a bug that could cause GitHub OIDC authentication to fail (#876)

v2.28.0

FEATURES

• Provider: support for generic OIDC authentication providers (#874)
• New Data Source: azuread_directory_object (#847)

IMPROVEMENTS:

• azuread_application - support max_size_limit as a value for the additional_properties property in the optional_claims block (#864)

v2.27.0

NOTES:

• This release contains a behavioral change for application/service principal passwords and certificates, when using a relative end date.

BUG FIXES:

• data.azuread_group - ensure security/mail enabled groups are excluded when explicitly false in config (#841)
• azuread_application_certificate - calculate end_date_relative from the start_date and not the current timestamp (#844)
• azuread_application_password - calculate end_date_relative from the start_date and not the current timestamp (#844)
• azuread_service_principal_certificate - calculate end_date_relative from the start_date and not the current timestamp (#844)
• azuread_service_principal_password - calculate end_date_relative from the start_date and not the current timestamp (#844)

v2.26.1

BUG FIXES:

• azuread_directory_role_assignment - fix a bug that required directory_scope_id to be set for unscoped assignments (#840)

v2.26.0

IMPROVEMENTS:

• azuread_directory_role_assignment - deprecate the app_scope_object_id property in favor of the app_scope_id property (#837)
• azuread_directory_role_assignment - deprecate the directory_scope_object_id property in favor of the directory_scope_id property (#837)

BUG FIXES:

• azuread_directory_role_assignment - fix incorrect schema validation for scoped role assignments (#837)
• azuread_directory_role_assignment - fix a bug that was preventing the creation of some scoped role assignments (#837)
• azuread_group - fix a bug where new group creation can error out before the timeout due to API inconsistency (#838)
• azuread_user - only set show_in_address_list when changed in config as it is a potentially read-only attribute (#831)

v2.25.0

FEATURES:

• New Resource: azuread_directory_role_assignment (deprecates the azuread_directory_role_member resource) (#826)