Update-EntraUserFromFederated

Reference

Module:: Microsoft.Graph.Entra

Updates a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type.

Syntax

Update-EntraUserFromFederated
      -UserPrincipalName <String>
      [-NewPassword <String>]
      [<CommonParameters>]

Description

The Update-EntraUserFromFederated cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type. A new password must be provided for the user.

This process writes the new password to Microsoft Entra ID and, if configured with password writeback, pushes it to on-premises Active Directory. The admin can provide a new password or let the system generate one. The user will be prompted to change their password at their next sign-in.

For delegated scenarios, the administrator needs at least the Authentication Administrator or Privileged Authentication Administrator Microsoft Entra role.

Admins with User Administrator, Helpdesk Administrator, or Password Administrator roles can also reset passwords for non-admin users and a limited set of admin roles.

Examples

Example 1: Update a user in a domain

Connect-Entra -Scopes 'UserAuthenticationMethod.ReadWrite.All'
Update-EntraUserFromFederated -UserPrincipalName 'pattifuller@contoso.com'

This command updates a user in a domain.

-UserPrincipalName parameter specifies the Microsoft Entra ID UserID for the user to convert.

Parameters

-NewPassword

The new password of the user.

For tenants using hybrid password scenarios, specifying a new password is required. If you omit the password for a cloud-only account, the system generates one automatically. This generated password is a Unicode string without additional encoding. Before acceptance, the password is validated against the tenant's banned password list and must meet the tenant's cloud and/or on-premises password requirements.

Type:	System.String
Position:	2
Default value:	None
Required:	False
Accept pipeline input:	True
Accept wildcard characters:	False

-UserPrincipalName

The Microsoft Entra ID UserID for the user to convert.

Type:	System.String
Position:	1
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

Notes

For more information, see resetPassword.

Share via