search

Azure / Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.
https://azure.microsoft.com/en-us/services/azure-sentinel/
MIT License
4.49k stars 2.95k forks source link

Playbook Reset-AADUserPassword - Password does not sync to On-prem AD #10920

Open curiousbwoy opened 1 month ago

curiousbwoy commented 1 month ago

Path: Solutions/Microsoft Entra ID/Playbooks/Reset-AADUserPassword

I have deployed this solution Reset-AADUserPassword through Sentinel alert trigger

The playbook runs sucessfully. However, it resets the password for my test account at Azure cloud and the same password is not getting synced to my on-prem ad, please can you let us know what is the issue here password policy does match with organization requirements

Output status code: 204

curiousbwoy commented 1 month ago

password sync

v-sudkharat commented 1 month ago

Hi @curiousbwoy, Thanks for flagging this issue, we will investigate this issue and get back to you with some updates by 16-08-2024. Thanks!

v-sudkharat commented 1 month ago

Hi @curiousbwoy, Could you check for the required rolls and permission for your account which mentioned into the below readme file: https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID/Playbooks/Reset-AADUserPassword/readme.md

Thanks!

curiousbwoy commented 1 month ago

Hi @v-sudkharat , yes all the roles are assigned to the managed identity of the logic app we are testing this logic app against normal users who are on-premise synced with password administrator role assigned to Managed identity of logic app

we performed it for 2 users

user 1 - Azure AD user not synced to on-prem AD:- Logic app runs successfully temporary password is assigned and once this temporary password is utilized by user it asks for user to create new password due to "forceChangePasswordNextSignIn: true"

user2 - Azure AD user synced to on-prem AD:- logic app runs successfully as shown in above image but the password is not accepted when user tries to signin it says incorrect password

v-sudkharat commented 3 weeks ago

@curiousbwoy, Thanks for your response. Will check on this issue and will get back to you. Thanks!