I have a question here - In AD Create Account, as for testing purpose, I was adding a static password value in password attribute, do I have to remove it or disable password attribute to get this script working?
If your client has Azure and TAP (Temporary Access Pass) configured, you can generate this password through Graph API.
That’s the way I’m handling first pass on my implementations if I have the opportunity. When ISC identifies that the user account has synced in Entra ID, I make a request to TAP via workflows and Graph API!