Change Password using Graph APIs

Question

Hello, I am trying to implement customer change password ability using Graph APIs. For the customer authentication we are using Azure B2C User Flows.

So the flow goes like the User logins via the UI (SPA) application and where he changes the password, the UI calls the BE server which will hit the graph API to change the password.

We were trying to use the OBO (On behalf of flow) to achieve this. While implementing we came across this error https://learn.microsoft.com/en-us/answers/questions/1332554/azure-identity-authenticationfailedexception-onbeh and learnt that OBO is not supported in Azure B2C.

Other option we see are To Use Custom Policy to change the password - But for this we need to even move the SignInSignUp User flow also to Custom Policy

Do we see any other ways to do this?

Answer 1

Hello Thiruvenkatam Rengarajan,

Thank you for reaching out to Microsoft Support!

The Graph API supports OAuth streams, and you can use auth code flow for interactive user login authentication and update passwords through the update user endpoint.

Programming the way, you can do it using the Graph SDK.

A simpler approach is to use Graph Explorer, where users log in and grant response permission to send a request to change their password.

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.