forceChangePasswordNextSignInWithMfa not working

Adarsh 16 Reputation points
2021-06-16T11:52:02.12+00:00

I set the forceChangePasswordNextSignInWithMfa argument to true in Password Profile while changing the password for a user but it is not asking the user for MFA before prompting to set a password. I tried the following configs already:

{
"forceChangePasswordNextSignIn": true,
"forceChangePasswordNextSignInWithMfa": true,
"password": password
},

{
"forceChangePasswordNextSignIn": false,
"forceChangePasswordNextSignInWithMfa": true,
"password": password
},

{
"forceChangePasswordNextSignInWithMfa": true,
"password": password
}

All the above three are not asking the user to do an MFA.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,669 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,581 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deva-MSFT 2,256 Reputation points Microsoft Employee
    2021-06-19T18:40:13.51+00:00

    If you're using forceChangePasswordNextSignInWithMfa then the user is required to first perform a multi-factor authentication before password change. Hope you're doing it. After a password change, this property will be automatically reset to false. If not set, default is false. The above behaviors are documented here.