Azure AD B2C - Set Custom Password Expiry for Select Users

Anonymous

Hey,

I am looking for a way to set custom password expiry date for select users in B2C using C#.

So far as per this official MS docs I found that we can only do that at the Tenant level using "Set-MsolPasswordPolicy" cmdlet.

I am using C# and Microsoft.Graph.GraphServiceClient to manage B2C users.

Please let me know if there is a way to set a custom Password Expiry for Select Users.

Thanks

1 answer

Alfredo Revilla - Senior Freelance SWE, SWA, IAM 27,016 Reputation points

2022-05-18T17:46:06.037+00:00

Hello @Anonymous , per user custom password expiration datetime is not possible in Azure AD or Azure AD B2C. You can howevever enforce it programmatically checking the user lastPasswordChangeDateTime property to decide if the password needs to be updated.

Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.
Please sign in to rate this answer.
Anonymous

2022-05-24T17:22:38.263+00:00

Hi @Alfredo Revilla - Senior Freelance SWE, SWA, IAM ,
Hope you doing great. Thanks for the reply.

This solution works with small number of users in B2C but with large number it is not feasible to keep checking the properties on a regular basis. Instead, we are logging the expirydatetime in our own system and update the password using an automated job.

Thanks

Alfredo Revilla - Senior Freelance SWE, SWA, IAM 27,016 Reputation points

2022-05-24T21:39:19.497+00:00

Hello @Anonymous , thanks for your sharing your comments and solution. My understanding is that you will move the password reset process to a separate automated job. If I'm not asking too much, I would love to know more about it. What password is going to be set and/or how will the user know or be prompted to reset his password?

Shashi Shailaj 7,581 Reputation points Microsoft Employee

2022-05-31T06:42:19.477+00:00

@Anonymous Hope you are doing great. Please let us know more about your scenario as requested by my colleague alfredo about this and we will continue to help you further.

Anonymous

2022-06-01T15:39:32.387+00:00

Hi @Alfredo Revilla - Senior Freelance SWE, SWA, IAM @Shashi Shailaj , Yes, the password reset process will be executed by an automated job and a temporary and randomly generated password will set with "ForceChangePasswordNextSignIn" set to true. User would receive the new temporary password through a secured channel.

Alfredo Revilla - Senior Freelance SWE, SWA, IAM 27,016 Reputation points

2022-06-07T04:21:03.25+00:00

Hi @Anonymous , thanks for the information. Sounds great, but I'm still wondering what's the criteria for firing up the update job? My guess is that many users will be updated on bulk on a less regular basis to save on resources. Is that correct? Can you expand more on that?
Sign in to comment