As configured earlier the authentication phone and authentication email is used. When a (new) user logs on now, he is presented with a pop-up, asking for verification methods. This is to require users to register when signing in, and the number of days the users are asked to re-confirm their authentication information, as shown in the following screenshot: In my example, I’m going to select just one, and options I select are Email and Mobile Phone.Ĭlick Save to continue. The last step is to configure the registration. Of course, if you want to enable SSPR for all your users you should select the All option.Ĭlick Save to store your selection. Click the second option Authentication Methods to select the number of methods available to your users. Using the Selected option, you can enable SSPR only to member of the security group SSPRSecurityGroupUsers for a more targeted approach. Select Azure Active Directory, select Password Reset and in the actions pane, select Selected or All. To enable Self Service Password Reset, logon to the Azure Portal ( ) as a Global Administrator.

For Self Service Password Reset you need an additional Azure AD Basic license. This feature enables cloud users to reset their own passwords in Azure Active Directory, and this way they don’t have to contact the local IT staff with reset password questions.

One option, not only for security, but also for user convenience is Self Service Password Reset (SSPR).

Reset office 365