This document describes the enhancements and bug fixes included in the eShare Cloud Web Portal release 202608.0.0. The following sections will be reviewed:
Enhancements
Per-Label Sharing Policies Now Apply to Access Link Trusted Shares
Trusted Shares created through an Access Link now evaluate each file's sensitivity label against the sharing policies mapped under the originating container's module, for both SharePoint sites and OneDrive. Previously every file in an Access Link share opened under the container's policy, even when individual files carried different labels. File-level, label-based controls are now consistent regardless of how the share was created.
Reset or Re-Register an Authenticator App
Users who lose access to their registered authenticator app can now reset it and register again ('Account Settings' > 'Reset Authenticator'), and organization administrators can trigger that reset from the Admin Console on a user's behalf ('Admin Console' > 'User Management' > 'Settings' > 'Reset Authenticator'). Previously, a registration could not be removed by the user or by support, which left affected users unable to complete one-time passcode verification.
Password Reset Emails Sent from the Organization's Own Sending Domain
Password reset emails now come from a no-reply address on the organization's configured sending domain and carry that organization's branding, rather than a shared eSHARE address. The previous sender was an infrequent one, so these messages were often quarantined or filed as junk by corporate mail filters. Recipients who saw an unfamiliar sender alongside familiar branding also frequently treated them as phishing emails.
PDF Editing, Signing and Commenting on Blob Storage Shares
PDF edit, signature and commenting features are now supported on Trusted Shares backed by Blob storage as the cloud provider. Previously, fillable fields added by an owner were not saved, and recipient signatures on a PDF that already contained fillable fields were also lost. PDF review and signature workflows can now be completed on Blob-backed shares the same way they are with all other Trusted Shares.
Clearer Error When an Allowed User's Domain Is Not Blocked
Sharing policies now return a specific, actionable message when an administrator adds an email address to the list of specifically allowed users but that address's domain is not already blocked. The previous message did not explain the cause, leaving administrators unsure why the policy would not save.
Bugs
Fixed Non-Overridable Sharing Policy Options Being Bypassed
Resolved an issue where Trusted Share options configured as non-overridable could still be changed by intercepting and modifying the web request used to create or update the share. Sharing policy restrictions could be bypassed this way even when user overrides were disabled.
Fixed Recipients Being Asked to Override Access Twice
Resolved an issue where a recipient who had already been granted a recipient override on a Trusted Share was prompted to request a second override when opening a file. This occurred when the file's sensitivity label was equal to or lower in priority than the container's label. Recipients are no longer re-prompted in that case.
Fixed Misleading Self-Invitation Notification from Shareable Links
Resolved an issue where an internal user who joined a Trusted Share through a Shareable Link received a notification stating that they had invited themselves to the share. The notification no longer misreports who initiated the invitation.
Fixed the All Files Button Not Working Inside a Trusted Share
Resolved an issue where, inside a Trusted Share containing more than one file or folder, the All Files button did not respond when selected from the My Recent or Favorites tab. Recipients had no way back to the file list without reopening the share.
Fixed Failure to Create External and Access Links from OneDrive
Resolved an issue where users at one organization could not create External Links or Access Links from the Microsoft 365 app in OneDrive, receiving a permission error from the link-creation request. Standard Trusted Shares were unaffected during this time.
Fixed Delete Option Not Reaching Every Recipient on Large Shares
Resolved an issue where enabling the Delete option on a Trusted Share with a very large recipient list applied the change to only some recipients. The share showed the option as enabled while a subset of recipients still had no delete action available.
Fixed Access Being Blocked for Certain Share Links During Sign-In
Resolved an issue where a share access token containing an encoded slash was encoded a second time during single sign-on redirection. The resulting multiply-encoded address was treated as an attack by upstream web application firewalls and blocked, preventing affected recipients from reaching the share.
Fixed Missing Business Justification in Microsoft 365 App Audit Details
Resolved an issue where the business justification text supplied with a Download with Approval request was not shown in the audit event details within the Microsoft 365 app.
Fixed Domain-Specific Terms of Use Not Being Presented
Resolved an issue where external recipients whose email domain matched a domain configured on a Terms of Use were shown the Sharing Policy's default Terms of Use instead. Matching recipients now receive the Terms of Use configured for their domain.
Fixed OneDrive File Picker Opening for Sites Without a Default Library
Resolved an issue where launching Create Share from the Microsoft 365 app on a SharePoint site whose default document library had been deleted opened the OneDrive file picker. Users are now taken to the site's own document libraries, as expected.