Thanks for your reply @amanpreetsingh-msft!

Is it possible at all for the application context to change the password for a user? Is there another API we could use for that?

Thanks!

Thanks again @amanpreetsingh-msft!

I have created a user with (hopefully) the correct priviliges. I am creating their oauth 2.0 token using .../oauth2/v2.0/token, and calling the API as before:

const creds = await Azure.Authenticate(AD_ADMIN, AD_ADMIN_PW); //works fine!

    return axios.request({
      baseURL: API_URI,
      url: `/beta/users/${this.id}/authentication/passwordMethods/${authID}/resetPassword`,
      method: 'post',
      headers: {
        Authorization: `Bearer ${creds.access_token}`
      },
      data: {
        newPassword
      }
    });

I am getting this response:

Invalid x5t claim.

These docs indicate that x5t is a legacy claim and is only available in the 1.0 token. Do you see any issues with what I am doing?

Thanks!