How to enable Azure Active Directory Self-Service Password Reset (SSPR)?
Self-Service Password Reset (SSPR) in Microsoft Azure Active Directory has 4 benefits:
- Password writeback - synchronizing passwords from Azure AD to On-premise AD.
- Self-Service Password Change - Users can change their passwords themselves.
- Self-service password reset/registration - Users are able to register at first login.
- Account unlock - When an account is locked, users can recover their password or unlock the account without help from the IT team.
Password writeback in Azure Active Directory (Azure AD)
If you use Office 365 or Microsoft 365 then the password will be synchronized from your local Active Directory to Azure Active Directory.
- Write passwords back to on-premises AD
- This is part of AAD Connect
- Enables the use of Azure password management without syncing passwords to the cloud
- AD password policy enforced
Self-service password change in Azure
Users are able to be self-sufficient. Customize their own watchwood without the intervention of IT.
Self-service password reset in Azure
Reset password because 2nd factor is set.
Account unlock in Azure
Can separate unlock from password recovery. So that users can unlock their account without resetting the password.
How to activate Self-Service Password Reset in Azure AD
Navigate to Azure Active Directory - password reset
Enable password reset, ALL. Or work with a group.
Choose the necessary authentication methods
Registration
Notifications
Measure and monitor implementation
Learn more: https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr
Enable password writeback in Microsoft AD connect.
Also read
The top 10 security recommendations when working from home with Microsoft 365
How to activate Multi-Factor Authentication (MFA) in Microsoft Office 365?
How to install Signal to send secure messages?
The 3 most important reasons to activate Multi-Factor Authentication!
About the author
