{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":48528,"path":"servicenow-platform/password-reset/config-azure-credential-store.md","title":"Configure the connection to the Microsoft Entra ID Credential Store","bundle":null,"doc_type":null,"release":"australia","body":"\n# Configure the connection to the Microsoft Entra ID Credential Store\n\nCreate a Password Reset credential store record to configure access to your Microsoft Entra ID server while a user is changing or resetting a password. In addition to host connection information, you can specify the password hints that users should see and other settings.\n\n## Before you begin\n\nRole required: none\n\n## About this task\n\nThe Microsoft Entra ID Integration for Password Reset installs the Microsoft Entra ID Credential Store type. The Microsoft Entra ID application supports only the **Microsoft Entra ID Credential Store**.\n\n## Procedure\n\n1.  Navigate to **All** &gt; **Password Reset** &gt; **Credential Stores** and select **Sample Microsoft Credential Store** that you can use out of the box or as a template.\n\n2.  Enter a unique **Name** and **Description** and then complete the form.\n\n<table id=\"table_e3x_kff_g1b\"><tbody><tr><td>\n\nType\n\n</td><td>\n\nSelect **Sample Microsoft Entra ID Credential Store**. A ServiceNow credential store type is a template that provides the required set of capabilities for a particular type of credential store. Credential stores inherit the functionality of the credential store type.\n\n</td></tr><tr><td>\n\nAuto generate password\n\n</td><td>\n\nSpecify a script include that generates a temporary password for use during the reset process.\n\n</td></tr><tr><td>\n\nHostname\n\n</td><td>\n\nSpecify the domain name of the Entra ID application in this column.\n\n</td></tr><tr><td>\n\nUser account lookup\n\n</td><td>\n\nSpecify the script include that maps the user ServiceNow platform ID to the user credential store ID. The default script, PwdDefaultUserAccountLookup, returns the user ServiceNow platform user name.\n\n</td></tr><tr><td>\n\nPassword rule hint\n\n</td><td>\n\nSpecify the text that appears on the password reset page to help the user to create a password that meets all requirements. The **Password rule** script enforces the requirements.\n\n</td></tr><tr><td>\n\nPassword rule\n\n</td><td>\n\nSpecify the client script that validates the new password entered by the user. The script is invoked when the user enters a new password and selects **Password Reset**.\n\n</td></tr><tr><td>\n\nEnable Password Strength\n\n</td><td>\n\nSelect the check box to:-   Display the text box for the **Strength rule** script so you can update the script.\n-   Display the graphical **Password Strength** bar to the user while the user changes or resets the password.\n\n\n</td></tr><tr><td>\n\nStrength rule\n\n</td><td>\n\nThis text box appears only if you select **Enable Password Strength**.Specify the client script that calculates the strength/complexity of the password that the user enters. The script is invoked when the user begins to enter a new password during the reset process.\n\nDefault settings:-   Selected for local ServiceNow credential stores\n-   Not selected for other credential stores\n **Note:**\n\nTo guide the user during the reset process, the system displays a graphical bar labeled **Password Strength** under the **New password** field.\n\n</td></tr><tr><td>\n\nEnable password policy\n\n</td><td>\n\nCheck this option to select either a default password policy or one you created yourself previously.\n\n</td></tr></tbody>\n</table>3.  Click **Submit**.\n\n    Password Reset Credential store record to access your Microsoft Entra ID server is configured.\n\n    **Note:**\n\n    -   The **Enable Password Policy** option was added in the Quebec release. Checking the option displays your password policy choices right from your instance. To learn more, see [Enable password policies on your instance](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/enable-password-policies.md).\n    -   Since the Microsoft Entra ID doesn't support the history policy, the **Enforce history policy** option is hidden.\n\n**Parent Topic:**[Credential Store for Password Reset for Microsoft Entra ID](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/servicenow-platform/password-reset/credentials-store-micro-ad.md)\n\n"}}