… exo-mailbox-SOA

…itations, cancel meetings)

Add support for Exchange cloud-only Set-MailboxAutoReplyConfiguration
parameters: CreateOOFEvent, OOFEventSubject, AutoDeclineFutureRequestsWhenOOF,
DeclineEventsForScheduledOOF, DeclineAllEventsForScheduledOOF, and
DeclineMeetingMessage.

These are plumbed through all 3 OOO entry points:
- Set-CIPPOutOfOffice: 6 new [bool]/[string] params with PSBoundParameters guards
- Get-CIPPOutOfOffice: returns new fields + fixes null-safe StartTime/EndTime
- Invoke-ExecSetOoO: extracts calendar params from request body (Scheduled only)
- Set-CIPPVacationOOO: accepts StartTime/EndTime + calendar params; uses
  Scheduled state when dates are provided for Exchange calendar option support
- Invoke-ExecScheduleOOOVacation: converts epoch to datetime for Scheduled mode,
  conditionally attaches calendar params to the Add task

All changes are backwards compatible — callers that omit the new parameters
get identical behavior via $PSBoundParameters.ContainsKey() guards.

[pull] dev from KelvinTegelaar:dev

Refactor license utilization checks to return structured alert data for Entra ID P1 and P2 licenses. This change enhances the clarity of alert messages and includes detailed information such as usage percentage, overage, and thresholds.

The previous implementation batched all MFA method deletions into a single Graph bulk request, which introduced two problems:

1. Duplicate method types (e.g. two phone numbers) could collide within the same batch, causing one of the requests to fail silently.
2. The success/failure check only inspected a single status code from the bulk response. If one method was removed but another failed, the function logged full success — leaving the user's MFA partially intact despite the log stating otherwise.

Switching to a sequential foreach loop eliminates the collision window and tracks successes and failures independently, so partial failures are reported accurately.

…censes

- Improved condition handling in Test-DeltaQueryConditions to sanitize inputs and prevent invalid conditions from being processed.
- Added validation for dynamic rules in Invoke-ExecTenantGroup to prevent code injection by restricting allowed operators and properties.
- Implemented error handling and validation for conditions in Invoke-AddAlert, ensuring only safe operators and properties are processed.
- Updated New-CIPPAlertTemplate to include a CustomSubject parameter for more flexible alert titles.
- Refactored Update-CIPPDynamicTenantGroups to utilize a safer evaluation method for dynamic group rules, ensuring only valid conditions are processed.
- Enhanced webhook processing in Invoke-CIPPWebhookProcessing to include custom subjects from webhook rules for better context in alerts.

…it log search creation

This reverts commit 121a2cb.

- Introduced a new function to compare Intune policies from two sources.

feat: Add support for community repo sources in policy comparison

Replace bulk deletion of MFA methods with individual requests to improve
error handling and avoid silent failures.

Tested with removing 2 software OTP, 1 TAP, 1 QR and 1 SMS method at the
same time successfully.

- Implements KelvinTegelaar/CIPP#5552
- Add `Invoke-ListMDEOnboarding` endpoint to check MDE connector status
via Graph API
- Add `Set-CIPPDBCacheMDEOnboarding` and `Get-CIPPMDEOnboardingReport`
for ReportDB caching
- Add `MDEOnboarding` to Intune cache collection for automatic updates

Added CIPP variable replacement to custom app powershell script block

- Implemented logic to handle requests for all tenants.

feat: add AllTenants support for app and compliance policies

feat: implement AllTenants functionality in Intune scripts

feat: enable allTenants support in assignment filters, reusable settings and intune apps

chore: remove unused Autopilot endpoint functions

feat: add AllTenants support for various endpoints

…er and incorrect status code check

Divide tests into groups per test suite collection
Custom tests executed separately as it's own collection

Add support for updating custom reports. Improve test summary counts in Invoke-ListTests by adding NeedsAttention (counts Investigate and Active) and Informational buckets across Identity/Devices/Custom. Normalize several ORCA IDs in report.json (add underscores) and change TestType to 'Identity' for multiple ZTNA test scripts (previously 'ZeroTrustNetworkAccess' or 'Devices').

Add support for updating custom reports. Improve test summary counts in
Invoke-ListTests by adding NeedsAttention (counts Investigate and
Active) and Informational buckets across Identity/Devices/Custom.
Normalize several ORCA IDs in report.json (add underscores) and change
TestType to 'Identity' for multiple ZTNA test scripts (previously
'ZeroTrustNetworkAccess' or 'Devices').

…der (#1972)

- Add missing `Content-Type: application/json` header to Graph Batch API
sub-requests in
`Remove-CIPPUserTeamsPhoneDIDs`, fixing "Write request does not contain
a Content-Type header" error
- Accept HTTP 202 as success status

#1707)

Gonna keep as a draft until the "dont enable this" banner on this page
changes
https://techcommunity.microsoft.com/blog/exchange/cloud-managed-remote-mailboxes-now-generally-available/4461705

- Frontend PR: KelvinTegelaar/CIPP#4955

… dev

… dev

)

Respect tenant app management policy password lifetime restrictions (if
configured) when creating CIPP API app credentials, otherwise we get the
error:
`Could not modify App Registrations. Check the CIPP documentation for
API requirements. Error: Failed to setup CIPP-API Access: Credential
lifetime exceeds the max value allowed as per assigned policy <policy
ID>`

Enhance functionality by implementing AllTenants support in various
endpoints, including app and compliance policies, assignment filters,
and Intune scripts.
- Remove unused Autopilot endpoint functions

Frontend PR: KelvinTegelaar/CIPP#5757

Improve logging for license utilization alerts by returning structured
data. Additionally, enhance MX record change logging with structured
output

…dards

lookup table for current transport rule config rather than the standards raw payload