ADB2C密码过期通知

ADB2C password expiration notification

本地 ADB2C 用户是否可以通过电子邮件接收密码过期通知?

我们计划将 DisablePasswordExpiration 标志设置为 false,但尚不清楚用户是否会收到密码即将过期的通知。

是的,对于 AzureAD B2C 租户中的本地帐户用户,我们可以通过应用密码策略来设置 exipring 密码通知。

注意:此密码策略不适用于外部用户。

设置密码过期策略的步骤。

  1. In the Microsoft 365 admin center, go to the Security & privacy tab under Org Settings. If you aren't a global admin, you won't see the Security and privacy option.
  2. Select Password expiration policy.
  3. If you don't want users to have to change passwords, uncheck the box next to Set user passwords to expire after a number of days.
  4. Type how often passwords should expire. Choose a number of days from 14 to 730.
  5. In the second box type when users are notified that their password will expire, and then select Save. Choose a number of days from 1 to 30.

参考自MS Document,请查看设置密码过期策略

我能想到的唯一方法是 运行 所有用户的脚本根据此 sample 设置 extension_passwordResetOn 对当前日期和时间的声明。

然后每次用户登录时,获取日期。当它必须(比如说)80 天时,在自定义策略中调用 REST API 以发送一封电子邮件,说明“密码将在 10 天后过期”。