Changelog

The following is the change history for the Azure AD Password Credential Validator.

Azure AD Password Credential Validator 2.1.1 - September 2025

Added the User Attributes Endpoint and Group Membership Endpoint fields in the PCV to allow customization of the user attributes and group membership endpoint URLs. Learn more in the Azure AD PCV instance configuration settings reference.

If you’re upgrading from Azure AD PCV 1.2 or earlier and used the objectID attribute in your extended contract, update this attribute to ID.

Added the Microsoft Login Base URL and Microsoft Token Endpoint fields in the PCV to support any changes Microsoft makes to the API endpoint. Learn more in the Azure AD PCV instance configuration settings reference.
Replaced the Read Timeout and Connection Timeout fields with the API Request Timeout field in the PCV. Learn more in the Azure AD PCV instance configuration settings reference.
Changed to a standardized .zip file structure to make automated deployments easier.

Improved support for passwords with special characters.
Added proxy connection override settings. Learn more in the advanced field descriptions in Azure AD PCV instance configuration settings reference.
Added the Read Timeout and Connection Timeout fields.

You can now disable user membership retrieval to reduce network traffic and API calls (in configurations where this data isn’t required). Learn more in the Disable User Group Retrieval field description in Azure AD PCV instance configuration settings reference.
Fixed an issue that prevented the PCV from properly failing over to the next PCV in the chain of an HTML form adapter.