CODEWITHSUNDEEP
azure-ad-b2c
spottedmahn
spottedmahn

Reputation: 16041

In Azure AD B2C, Can we force a password reset after N days?

When using local accounts, can we force a password change every N days?

If not, can we use the graph api to determine the last time the password was changed?

Upvotes: 1

Views: 603

Answers (2)

SalvatoreGarrubba
SalvatoreGarrubba

Reputation: 378

The Azure AD B2C Team updated the user voice request here. So now you can use an extension policy to force the password expiration, you can take a look at the code here.

Also, the Azure AD Team released a similar feature, updating the user voice request here.

The property is called:

lastPasswordChangeDateTime

and indeed seems to be the correct one:

The time when this Azure AD user last changed their password. The date and time information uses ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: '2014-01-01T00:00:00Z'

See the updated official documentation for the Graph API.

Upvotes: 0

Parakh
Parakh

Reputation: 1232

You're not going to like my answer but...

At this time, Azure AD B2C does not support forced password reset. I would vote for it here.

At this time, the graph API also doesn't support when a password was last changed. Vote for that here.

Upvotes: 2

Related Questions