Turn off SSO when the client secret is expired
When a client secret is expired and therefore SSO cannot be used anymore, it would probably be good if it became disabled.
Send daily log of successful/unsuccessful emails
Would it be possible to send a daily log of successful/unsuccessful emails?
Role synchronization
Currently user synchronization is the only way to synchronize roles. You can replace all roles for a user when doing a sync, but for that to work it requires you define every role for every user. Nearly all of my sites have internal staff that I want to login with O365, but also external customers …