Checking enforcement of "Immediate Temporary Password Change" with graph api

Question

In the Microsoft 365 admin center, for a given active user, I reset their password, making sure that I check the box labeled "Require this user to change their password when they first sign in".

So far so good, now I go ahead and click the button to reset the password. I check user properties using the graph api (v1.0), using the endpoint https://graph.microsoft.com/v1.0/users?$select=displayName,passwordProfile
And as expected I see this:

But when I reset the password, and don't check the box to require the user to change their password, I get this in the graph api:

Am I missing something? passwordProfile is null by default, so why does it stay this way when the password is reset, why wouldn't it show "forceChangePasswordNextSignIn" as false instead?

Answer 1

@Dancing Strawberry Please note that forceChangePasswordNextSignIn, whether set to true or false, applies only to the next sign in, which you already accomplished by the reset. After the reset, your passwordProfile settings have already been applied and the property is set to null.

"forceChangePasswordNextSignIn": false means either no password reset at next sign in or it could mean you'll be using the custom policies or user flows to reset the password

Hope this helps. Thanks!