Stop user from being able to change password to the current one again using Graph API

Question

Hi,
I am creating a power automate flow to be used by Power Virtual Agent Bot which will assist user in changing their passwords.
API: https://graph.microsoft.com/v1.0/users/<UserID>
{
"passwordProfile": {
"password": "Test12345678",
"forceChangePasswordNextSignIn": false
}
}
However, I noticed that user is able to change password to the current password again.
That means even with password change policy, user can forever keep the same password.

Any ways to overcome this limitation?

Answer 1

Hi @Anonymous ,

AAD password policies enable users to use the same password, the last password can be used again when the user resets a forgotten password.
Refer to Azure AD password policies.

Hope this helps.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have further questions about this answer, please click "Comment".