{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/active-directory/main/json-schema/users-password-profile-schema.json",
  "title": "PasswordProfile",
  "description": "Password profile for a Microsoft Entra user account",
  "type": "object",
  "required": ["password"],
  "properties": {
    "password": {
      "type": "string",
      "description": "Password for the user — must meet tenant complexity requirements",
      "writeOnly": true,
      "minLength": 8
    },
    "forceChangePasswordNextSignIn": {
      "type": "boolean",
      "description": "If true, user must reset password at next sign-in",
      "default": true
    },
    "forceChangePasswordNextSignInWithMfa": {
      "type": "boolean",
      "description": "If true, user must perform MFA and then reset password at next sign-in",
      "default": false
    }
  }
}