Setting up Self-Service Password Reset (SSPR) in Microsoft Azure

This covers setting up the password reset service in Microsoft Azure.

ENABLING SELF-SERVICE PASSWORD RESET

Within Azure Active Directory, go to the Password Reset section.

Under the Properties section, you have a switch with the options None, Selected, All. This is for enabling self-service password resets. The All option will enable SSPR for all users in the tenant, None will disable the feature and Selected will enable it for a specific Security Group. (This can be good to only enable it for specific users)

SETTING YOUR OPTIONS FOR SSPR

You can now define your options for the self-service password reset process. This is defining how many authentication steps are required, and what authentication methods users can choose to use as shown below.

You can set Registration settings so users have to register first time they log in to define their MFA settings (Set security question answers, enter mobile phone number, etc) as well as how often they have to re-confirm their authentication details.

You can control the notification settings such as notifying a user when their password was reset as well as notifying all admins when another admin resets their password.