Feature Q&A: Canvas Release Notes (2024-09-21)

[InstContentTeam]

Looking to discuss these features from the 2024-09-21 Release Notes? Post a reply and start a conversation!

Updated Features

• Developer Keys: New Quizzes endpoints in Token Scopes

Other Updates

• Analytics: Admin Analytics and Course Analytics migration to Data Access Platform (DAP)

Feature Options

• Authentication: Canvas Authentication Provider Password Options [Added 2024-09-05]
• Settings: Limiting Access Token Generation [Added 2024-09-05]

ADD FEEDBACK FOR THESE FEATURES IN Q&A TOPIC

• This topic is for feature discussion only—Please share use cases, best practices, questions, clarifications, etc. regarding this feature.
• Please thread replies as possible to keep posts organized. This will help everyone to track discussions and to participate.

ADDITIONAL FEEDBACK—WHERE TO POST IDEA SUGGESTIONS AND SUBMIT BUG REPORTS

• Idea requests for the Product Team to consider should be submitted in ideas.canvaslms.com . This is the best way to ask for additional or alternative functionality than what is included in the release. Linking to the related idea here so others can find it is encouraged!
• Bug reports should be submitted to Canvas Support. This way, cases can be connected and uniform updates can be provided to those involved. Bugs will not be triaged in this thread

[mpfaff1]

Re: https://community.canvaslms.com/t5/Canvas-Releases/Canvas-Release-Notes-2024-09-21/ta-p/612521#toc-h...

Please make the following an Admin Guide; I always have trouble finding this information / sending it to other admins because it only lives tucked away at the bottom of Release Notes.

If an admin has both the Users - Manage Access Tokens permission and the Users - act as permission, they can masquerade as a user to generate a token on the user's behalf. This updates the status as Pending to prevent unauthorized token generation without the user’s knowledge.The access token should then be securely shared with the user by the admin.  Additionally, an admin can masquerade as a user to delete that user's existing access tokens and regenerate tokens.

Notes: 

• Regenerating an existing access token on behalf of a user will place the token in a pending state, similar to newly generated tokens. The user must activate the token before it can be used. The access token should be securely shared with the user by the admin.
• Tokens generated by an admin on behalf of a user will remain in a pending state until the user navigates to their user settings and activates the token.
• Users will receive an email notification if an access token has been generated on their behalf.