Swif

Per this <a href="https://learn.microsoft.com/en-us/entra/identity/devices/howto-manage-local-admin-passwords#enabling-windows-laps-with-azure-ad" rel="nofollow noopener noreferrer" target="_blank">doc</a>, you can enable LAPS on the Entra ID:

To enable Windows LAPS with Microsoft Entra ID, you must take actions in Microsoft Entra ID and the devices you wish to manage. If your devices are Microsoft Entra joined and use Swif, you can deploy Windows LAPS for Microsoft Entra ID manually. For more information, see the article <a href="https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-management-policy-settings" rel="nofollow noopener noreferrer" target="_blank">Configure Windows LAPS policy settings</a>.

Sign in to the <a href="https://entra.microsoft.com/" rel="nofollow noopener noreferrer" target="_blank">Microsoft Entra admin center</a> as at least a <a href="https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#cloud-device-administrator" rel="nofollow noopener noreferrer" target="_blank">Cloud Device Administrator</a>.

Browse to Identity &gt; Devices &gt; Overview &gt; Device settings

Select Yes for the Enable Local Administrator Password Solution (LAPS) setting, then select Save. You might also use the Microsoft Graph API <a href="https://learn.microsoft.com/en-us/graph/api/deviceregistrationpolicy-update?view=graph-rest-beta&amp;preserve-view=true" rel="nofollow noopener noreferrer" target="_blank">Update deviceRegistrationPolicy</a> to complete this task.

Configure a client-side policy and set the BackUpDirectory to Microsoft Entra ID.

- If you're using Group Policy Objects (GPO) to manage client-side policies, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-management-policy-settings#windows-laps-group-policy" rel="nofollow noopener noreferrer" target="_blank">Windows LAPS Group Policy</a>

1. Sign in to the <a href="https://entra.microsoft.com/" rel="nofollow noopener noreferrer" target="_blank">Microsoft Entra admin center</a> as at least a <a href="https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#cloud-device-administrator" rel="nofollow noopener noreferrer" target="_blank">Cloud Device Administrator</a>.
2. Browse to Identity &gt; Devices &gt; Overview &gt; Device settings
3. Select Yes for the Enable Local Administrator Password Solution (LAPS) setting, then select Save. You might also use the Microsoft Graph API <a href="https://learn.microsoft.com/en-us/graph/api/deviceregistrationpolicy-update?view=graph-rest-beta&amp;preserve-view=true" rel="nofollow noopener noreferrer" target="_blank">Update deviceRegistrationPolicy</a> to complete this task.
4. Configure a client-side policy and set the BackUpDirectory to Microsoft Entra ID.
 - If you're using Group Policy Objects (GPO) to manage client-side policies, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-management-policy-settings#windows-laps-group-policy" rel="nofollow noopener noreferrer" target="_blank">Windows LAPS Group Policy</a>