servicePrincipal: deletePasswordSingleSignOnCredentials

Namespace: microsoft.graph


APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Delete single sign-on credentials using a password for a user or group.

This API is available in the following national cloud deployments.

Global service US Government L4 US Government L5 (DOD) China operated by 21Vianet


One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) Application.ReadWrite.All and Directory.Read.All, Directory.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application Application.ReadWrite.All and Directory.Read.All, Directory.ReadWrite.All


Users can create credentials for themselves. Service principal owners and admins with the following roles can create credentials for any user or group: GlobalAdministrator, ApplicationAdministrator, CloudApplicationAdministrator. To learn more, see Directory roles.

HTTP request

You can address the service principal using either its id or appId. id and appId are referred to as the Object ID and Application (Client) ID, respectively, in app registrations in the Microsoft Entra admin center.

POST /servicePrincipals/{id}/deletePasswordSingleSignOnCredentials
POST /servicePrincipals(appId='{appId}')/deletePasswordSingleSignOnCredentials

Request headers

Name Description
Authorization Bearer {token}. Required.
Content-Type application/json. Required.

Request body

In the request body, provide a JSON object with the following parameters.

Parameter Type Description
id String The ID of the user or group this credential set belongs to.


If successful, this method returns a 204 No Content response code. It doesn't return anything in the response body.



The following is an example of a request.

Content-type: application/json

  "id": "5793aa3b-cca9-4794-679a240f8b58"


The following example shows the response.

HTTP/1.1 204 No Content