Reset a user's Microsoft password and force them sign-out of all active sessions using an automated cloud flow trigged by an email with a keyword and the user's email address in the subject

(0) Share

Report

Posted on by DanJECC

Hi all. I am wondering if it is possible to use a cloud flow to reset a user's Entra ID password and force a sign-out of all active sessions, basically use both of these settings in one flow:

There may also be other security measures included as well, such as resetting MFA.

This flow would be triggered by sending an email to a mailbox monitored by PA, with the subject containing a keyword to trigger the specific flow, and the email address of the user to be reset. This way multiple actions could be activated quickly and easily, even by someone who isn't an admin (if they are given the keyword and email address).

I'm assuming this will require the use of API connections (I already have a PA Premium licence). Can anyone advise if this would be possible, and point me down the path to achieving this?

Categories:

Business Process Flows

I have the same question (0)

All responses (1)

Answers (0)

Expiscornovus 32,836 Most Valuable Professional on at

Like (0)

Report

Re: Reset a user's Microsoft password and force them sign-out of all active sessions using an automated cloud flow trigged by an email with a keyword and the user's email address in the subject

Hi @DanJECC,

It looks like this should be possible by using the Graph API.

My suggestion would be to combine the below two methods of the Graph API:

- resetPassword, https://learn.microsoft.com/en-us/graph/api/authenticationmethod-resetpassword?view=graph-rest-1.0&tabs=http

- revokeSignInSessions, https://learn.microsoft.com/en-us/graph/api/user-revokesigninsessions?view=graph-rest-1.0&tabs=http

Was this reply helpful? Yes No