Description:

This step unlocks an existing Microsoft Entra ID user account.

The Unlock EntraID User workflow step connects to Microsoft Entra ID (formerly Azure Active Directory) and unlocks a user account by assigning a temporary password. This enables administrators to restore user access after an account has been locked or blocked.

The step supports:

• Microsoft Entra ID user account unlock
• Configurable Entra ID connections
• Temporary password assignment
• Dynamic user information using workflow variables
• Integration with Microsoft Graph through FlowWright connections

This step can be used for:

• User account recovery
• Help desk password reset processes
• Locked account remediation
• Employee support workflows
• Identity lifecycle management
• Security incident response
• Business process automation

Usage:

The Unlock EntraID User step is typically placed after a user verification or approval process within a workflow.

The workflow can dynamically populate the username and temporary password using workflow variables, form fields, service desk requests, or data retrieved from external systems.

Once the user account has been unlocked, later workflow steps can:

• Send password reset instructions
• Notify the user by email
• Log the account recovery activity
• Update help desk tickets
• Resume employee onboarding or support workflows
• Trigger additional security validation

You need to set up an EntraID connection. Go to Integration > Connections > Generic Connections. On the Manage Generic Connections page, click Actions > Create. A sample connection is included here for reference. 

Example:

Let’s build and execute the “clsUnlockEntraIDUserDef” example:

• Create a new process definition named “clsUnlockEntraIDUserDef” and open it in designer mode. 
• Drag a “clsUnlockEntraIDUser” step to the canvas.
• Connect the dots between the “Start” and “clsUnlockEntraIDUser” steps.
• Click the "clsUnlockEntraIDUser" step to configure its "Required" properties. Provide a name for the step. Select the EntraID connection from the drop-down list. Provide the “Username” and “Temporary Password”. Click the Save button. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• The “Logging” configuration is necessary for documentation and also measures workflow progress and percent complete. This is achieved by configuring the step state and percent fields individually, as shown below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Unlock User step, FlowWright connects to the configured Microsoft Entra ID tenant and attempts to unlock the specified user account by assigning the temporary password. If the operation completes successfully, the workflow follows the Unlocked return path. If the account cannot be unlocked—for example, because the user cannot be found, the connection is unavailable, or the temporary password does not meet the organization's password policy—the workflow follows the NotUnlocked return path.

Tips:

• Verify that the Microsoft Entra ID connection has been configured before using this step.
• Use workflow variables to dynamically populate usernames and temporary passwords.
• Ensure that the specified User Principal Name (UPN) exists in Microsoft Entra ID.
• Configure temporary passwords that comply with your organization's password policy.
• Use the Unlocked and NotUnlocked return paths to implement appropriate success and error handling.
• Combine this step with email notification or password change workflows to improve the user recovery experience.

Notes:

• A valid Microsoft Entra ID connection must exist before this step can execute.
• The configured connection must have sufficient Microsoft Graph permissions to reset passwords and unlock user accounts.
• The specified User Principal Name (UPN) must already exist in Microsoft Entra ID.
• Temporary passwords that do not satisfy tenant password policies may cause the operation to fail.
• Network connectivity or authentication issues may prevent successful account recovery.
• The workflow should include appropriate error handling for the NotUnlocked return path.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• Microsoft Entra ID connection
• Username mapping
• Temporary password mapping
• Workflow variable mappings
• Microsoft Graph permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.