azure-ad-b2centra

Reset password MS Entra

We're trying to implement reset password workflow on MS Entra, when admin can enforce user to change a password. Is there such a workflow or it has to be implemented manually eg create a temporary password and ask user to change on the next login?

Solution

  • In Microsoft Entra ID, there is no built-in workflow explicitly labeled as "Password Reset" similar to Azure AD B2C. However, administrators can enforce a password reset by manually creating a temporary password and ask user to change on the next login:

    enter image description here

    Alternatively, you can run below Microsoft Graph API call in Graph Explorer by signing in as admin, that forces user to reset password on next sign-in.

    PATCH https://graph.microsoft.com/v1.0/users/userId
{
  "passwordProfile": {
    "forceChangePasswordNextSignIn": true
  }
}

    Response:

    enter image description here

    When user tried to sign in, it asked to update password in next prompt as below:

    enter image description here

    Reference:

    Update user - Microsoft Graph v1.0