topic Re: AzureAD/MS Graph User Expire Password in Cortex XSOAR Discussions

AzureAD/MS Graph User Expire Password

Gregoryscott — Tue, 24 Oct 2023 18:54:09 GMT

Anyone familiar with MS Graph User integration and using it to expire a password for a user, much like Active Directory Query V2 "!ad-expire-password"?

It appears the method with PowerShell is using Connect-AzureAD and updating the passwordProfile attribute. But haven't had a successful test with !msgraph-user-update when trying to update that attribute.

"passwordProfile": {
    "password": null,
    "forceChangePasswordNextSignIn": true,
    "forceChangePasswordNextSignInWithMfa": false
}

Re: AzureAD/MS Graph User Expire Password

Gregoryscott — Tue, 24 Oct 2023 20:56:05 GMT

Something like....

!msgraph-user-update user="jane.doe@domain.com" updated_fields=`PasswordProfile=@{'forceChangePasswordNextSignIn'=$true}`

But this fails due to the extra equals sign I believe:
Reason

too many values to unpack (expected 2)

Re: AzureAD/MS Graph User Expire Password

Gregoryscott — Fri, 27 Oct 2023 17:38:36 GMT

Didn't see this as an option in the Azure Active Directory Users integration. This is the solution:
!msgraph-user-change-password force_change_password_next_sign_in=