First sign-in
Getting a new starter signed in on day one: passwords, Temporary Access Pass and pre-start accounts.
Why your Logic App can't set a hybrid user's first password
Graph will happily change a synced user's password from automation. The change just never reaches Active Directory, and the new starter is left with a password that doesn't work.