Add ForcePasswordChange option to azuread.NewUser (#94)

osstotalsoft · Feb 14, 2024 · 6766db7 · 6766db7
1 parent cdc2648
commit 6766db7
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/internal/controllers/provisioning/provisioners/pulumi/entra_user.go b/internal/controllers/provisioning/provisioners/pulumi/entra_user.go
@@ -40,9 +40,10 @@ func deployEntraUser(target provisioning.ProvisioningTarget,
 	}
 
 	user, err := azuread.NewUser(ctx, entraUser.Name, &azuread.UserArgs{
-		UserPrincipalName: pulumi.String(entraUser.Spec.UserPrincipalName),
-		DisplayName:       pulumi.String(entraUser.Spec.DisplayName),
-		Password:          initialPassword,
+		UserPrincipalName:   pulumi.String(entraUser.Spec.UserPrincipalName),
+		DisplayName:         pulumi.String(entraUser.Spec.DisplayName),
+		Password:            initialPassword,
+		ForcePasswordChange: pulumi.Bool(true),
 	})
 	if err != nil {
 		return nil, err