This tool provides user provisioning to Active Directory and Azure Active Directory, among others. So we don't use Azure AD Connect/federation or anything like that. This is a use case that is used by many companies.
Because our own IdP is leading, password changes for users also take place in the tooling itself (portal). It is therefore important that users do not change their passwords in Azure themselves, but in our IdP portal. If they do, it will causing disruptions for the user. Because we provide even more target systems with user provisioning, the new password will not be set in the other environments.
Is there a way to prevent users from changing their passwords in the various Azure/O365 portals such as https:\\myaccount.microsoft.com?
For example, in Active Directory, there is a PowerShell option "set-aduser -CannotChangePassword".
