azure-b2c-local-account-password-input

A B2C local-account password is a plaintext create/reset request field and is never returned.

azurecritical service: azure:b2c emits ContainsSecret

Where it sits

locationmicrosoft.graph.user.passwordProfile.password
location kindsecret_value
data kindscredential password
emits edgeContainsSecret
serviceAzure AD B2C (azure:b2c)

Collection recipe

access modewrite_only_input
operationPOST /users or PATCH /users/{id}
response pathrequest.passwordProfile.password
encodingjson
params{"id": "\u003cid\u003e"}

Required permissions

User.ReadWrite.All

References

move · open · esc close