Implementing Azure AD self-service password reset (SSPR)
One of the common challenges faced by IT administrators is responding to user requests to reset forgotten passwords. This issue is addressed in Azure AD by self-service password reset (SSPR).
SSPR allows Azure AD users to reset their own passwords without the need to contact their IT department. In order to use this feature, users must complete a registration process, during which they will need to choose one or more authentication methods that have been set up by administrators in Azure AD.
When planning for SSPR, you need to consider the different types of user identities within your Microsoft 365 tenant and how SSPR will behave when users wish to reset their own passwords. These are as follows:
- In-cloud only users
- Hybrid identity users
Both user types can register for and use SSPR, but the experience and license requirements will differ. In-cloud user passwords are stored within Azure AD, whereas...