We use the Office 365 connector not for SSO. As a school limited by various data protection policies issued by govenment in our state (Niedersachsen) we use it to provision Office 365, which is stripped down only to show up the Download-Links for the local binaries of MS Office 2016.

But one thing in our scenario is missing. We have to set on the office 365 side an initial password (a standard for all) and the flag to "Change password on next login".

With this procedure we are able to pass over the possibility to download Office binaries while decoupling the O365 account concerning the password.

It would be fine to have ucr variables to define the standard initial password and to set a flag for "Change password on next login".

At the moment, we must apply this behaviour only to pupils, so it would be great to differentiate either between ucs groups (pupils or teacher or etc.) or to bind this to one of the 'Office 365 Profiles'.