Get the Password Hash Sync setting for Entra Cloud Sync using Microsoft Graph and PowerShell

I've recently blogged about how to Get the "Password Hash Sync" setting for Entra Cloud Sync using Microsoft Graph and PowerShell as part of a bigger blog "Get the Cloud Sync configuration for an Entra directory using PowerShell and Microsoft Graph"

https://www.centrel-solutions.com/blog/get-entra-cloud-sync-configuration-with-graph-powershell

The Password Hash Sync setting isn't a boolean value but actually an attribute mapping within the "user" object mapping.

# Determines whether password hash sync is enabled for the job. This only applies to "User and group sync" jobs.

function Get-IsPasswordHashSyncEnabled {

    param (

        $Job

    )

    $schema = Get-MgServicePrincipalSynchronizationJobSchema -ServicePrincipalId $configuration.Id -SynchronizationJobId $Job.Id;

    foreach ($objectMapping in $schema.SynchronizationRules[0].ObjectMappings)

    {

        if ($objectMapping.SourceObjectName -eq "user")

        {

            foreach ($attributeMapping in $objectMapping.AttributeMappings)

            {

                if ($attributeMapping.TargetAttributeName -eq "CredentialData")

                {

                    return $true;

                }

            }

        }

    }

    return $false;

}