Self-service password reset

The SSPR feature allows businesses to give users the ability to reset their own passwords without any interaction with the service desk. This could massively reduce the number of support tickets in your organization as most users can recover themselves.

When a user enters their password too many times incorrectly, the account will go into a locked state. With the SSPR service, the end user can then change the password and will be prompted for MFA during that process.

Note

Before users can unlock their account or reset a password, they must register their contact information.

SSPR requires an AAD Premium P1 license, which comes with Microsoft 365 E3 or higher.

You must go to AAD in the Azure portal (https://portal.azure.com/#home) to activate the feature.

Figure 13.27 – Self service password reset enabled

It's also possible to make SSPR available for AAD group members only – via the Selected...