Skip to content

Commit e7d35ce

Browse files
squiocgithub-actions[bot]
authored andcommitted
Refresh automation library documentation
1 parent f757c56 commit e7d35ce

2 files changed

Lines changed: 32 additions & 9 deletions

File tree

_shared_content/automate/library/microsoft-entra-id.md

Lines changed: 29 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ type: playbook
66

77
![Microsoft Entra ID](/assets/playbooks/library/microsoft-entra-id.png){ align=right width=150 }
88

9-
Microsoft Entra ID (formely Azure Active Directory) is an enterprise identity service that provides single sign-on, multifactor authentication, and conditional access to guard against 99.9 percent of cybersecurity attacks.
9+
Microsoft Entra ID (formerly Azure Active Directory) is an enterprise identity service that provides single sign-on, multifactor authentication, and conditional access to guard against 99.9 percent of cybersecurity attacks.
1010

1111
## Configuration
1212

@@ -28,7 +28,7 @@ Delete an app in azure AD. Requires the Application.ReadWrite.OwnedBy or Applica
2828

2929
| Name | Type | Description |
3030
| --------- | ------- | --------------------------- |
31-
| `id` | `string` | Object ID of the app. |
31+
| `objectId` | `string` | Object ID of the app. |
3232

3333
### Disable User
3434

@@ -120,9 +120,9 @@ Get information about an user's authentication methods (such as their MFA status
120120
| --------- | ------- | --------------------------- |
121121
| `authenticationResults` | `array` | |
122122

123-
### Reset User Password
123+
### Reset User Password [DEPRECATED]
124124

125-
Reset a user's password. You will need UserAuthenticationMethod.ReadWrite.All deleguated permission. And to disable the MFA authentication in your azure AD
125+
Reset a user's password (deprecated). You will need UserAuthenticationMethod.ReadWrite.All delegated permission. And to disable the MFA authentication in your azure AD
126126

127127
**Arguments**
128128

@@ -132,6 +132,27 @@ Reset a user's password. You will need UserAuthenticationMethod.ReadWrite.All de
132132
| `userPrincipalName` | `string` | Principal Name of the user. id or userPrincipalName should be specified. |
133133
| `userNewPassword` | `string` | New password, required to reset the old one of course. |
134134

135+
### Reset User Password
136+
137+
Resets a user's password by patching passwordProfile. Requires User-PasswordProfile.ReadWrite.All (Application), admin consent and appropriate Entra role assignment
138+
139+
**Arguments**
140+
141+
| Name | Type | Description |
142+
| --------- | ------- | --------------------------- |
143+
| `id` | `string` | ID of the user. Only one of id or userPrincipalName should be specified. |
144+
| `userPrincipalName` | `string` | Principal Name of the user. Only one of id or userPrincipalName should be specified. |
145+
| `userNewPassword` | `['string', 'null']` | New password, to reset the old one. Let empty to generate a random password. If not empty, should comply with https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-combined-policy |
146+
| `forceChangePasswordNextSignIn` | `boolean` | Determines if the user must change their password on the next sign-in. |
147+
| `forceChangePasswordNextSignInWithMfa` | `boolean` | Determines if the user must perform a multifactor authentication (MFA) before being forced to change their password. |
148+
149+
150+
**Outputs**
151+
152+
| Name | Type | Description |
153+
| --------- | ------- | --------------------------- |
154+
| `newPassword` | `string` | New password |
155+
135156
### Revoke Sign in
136157

137158
Invalidates all the refresh tokens issued to applications for a user. Requires the User.ReadWrite.All or Directory.ReadWrite.All permissions.
@@ -140,7 +161,7 @@ Invalidates all the refresh tokens issued to applications for a user. Requires t
140161

141162
| Name | Type | Description |
142163
| --------- | ------- | --------------------------- |
143-
| `id` | `string` | ID of the app. |
164+
| `id` | `string` | ID of the user. id or userPrincipalName should be specified. |
144165
| `userPrincipalName` | `string` | Principal Name of the user. id or userPrincipalName should be specified. |
145166

146167
## Set up
@@ -170,7 +191,7 @@ Invalidates all the refresh tokens issued to applications for a user. Requires t
170191
#### Add permissions
171192

172193
1. Go to `Manage` > `API permissions`
173-
2. Click `Add a permissions`
194+
2. Click `Add a permission`
174195
3. On the right panel, Select `Microsoft APIs` tab
175196
4. Click `Microsoft Graph`
176197
5. Click `Application permissions`
@@ -180,11 +201,12 @@ Invalidates all the refresh tokens issued to applications for a user. Requires t
180201
3. `UserAuthenticationMethod.ReadWrite.All`
181202
4. `Directory.ReadWrite.All`
182203
5. `AuditLog.Read.All`
204+
6. `User-PasswordProfile.ReadWrite.All`
183205
7. Click `Add permissions`
184206
8. In the `API permissions` page, click `Grant admin consent for TENANT_NAME`
185207
9. Click `Yes` in the `Grant admin consent confirmation` modal
186208

187209

188210
## Extra
189211

190-
Module **`Microsoft Entra ID` v2.9.0**
212+
Module **`Microsoft Entra ID` v2.10.16**

mkdocs.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -99,7 +99,7 @@ nav:
9999
- Asset Context Panel (coming soon): xdr/features/investigate/asset_context_panel.md
100100
- Events Query Language: xdr/features/investigate/events_query_language.md
101101
- Querying Events: xdr/features/investigate/querying_events.md
102-
- Query Builder:
102+
- Query Builder:
103103
- Discover the query builder: xdr/features/investigate/query_builder.md
104104
- Create and manage queries: xdr/features/investigate/create_manage_queries.md
105105
- Share and duplicate queries: xdr/features/investigate/share_queries.md
@@ -440,7 +440,6 @@ nav:
440440
- Threat Intelligence:
441441
- Prodaft USTA: integration/categories/threat_intelligence/prodaft_usta.md
442442
- List of Playbooks Actions:
443-
- Overview: integration/action_library/overview.md
444443
- Applicative:
445444
- ElasticSearch: integration/action_library/elasticsearch.md
446445
- Mandrill: integration/action_library/mandrill.md
@@ -487,10 +486,12 @@ nav:
487486
- IAM:
488487
- Microsoft Active Directory: integration/action_library/microsoft-active-directory.md
489488
- Microsoft Entra ID: integration/action_library/microsoft-entra-id.md
489+
- Microsoft Entra ID: integration/action_library/microsoft-entra-id.md
490490
- Network:
491491
- Fortigate Firewalls: integration/action_library/fortigate-firewalls.md
492492
- Sophos: integration/action_library/sophos.md
493493
- Zscaler: integration/action_library/zscaler.md
494+
- Overview: integration/action_library/overview.md
494495
- Threat Intelligence:
495496
- BinaryEdge's API: integration/action_library/binaryedge-s-api.md
496497
- Censys: integration/action_library/censys.md

0 commit comments

Comments
 (0)