We're getting AD setup in our environment, so I have most of my users imported with requirements that they must change password at next logon.
We're using Azure Active Directory (Premium).
I want the users to use the Azure portal to set their initial password and password reset information.
However, the portal won't let anyone login who hasn't already changed their password.
I'm guessing it is looking at the "pwdLastSet" attribute, but there doesn't seem to be a way to set that via PowerShell. That attribute seems to be the only one that is really different from someone who is able to login successfully.
Maybe there is an MSOL attribute I need to set?
Am I wrong? Anyone been able to do this?