📖 What is Self-Service Password Reset (SSPR)?
Self-Service Password Reset (SSPR) is a feature in Microsoft Entra ID that allows users to reset their own passwords without administrator intervention. This reduces help desk tickets and increases productivity by enabling users to securely verify their identity via pre-registered methods.
"Pay close attention to the difference between SSPR for cloud-only users and password writeback for users synced from on-premises Active Directory."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Self-Service Password Reset (SSPR)?
- ▸ Authentication methods require users to pre-register security info, such as mobile numbers or email addresses, to verify their identity during the reset process.
- ▸ Password Writeback is a critical feature for hybrid environments, allowing password changes in Entra ID to sync back to on-premises Active Directory.
- ▸ Licensing is a key exam point; while basic SSPR is available, Password Writeback requires a Microsoft Entra ID P1 or P2 license.
- ▸ Administrators can configure SSPR policies to determine which users have access and how many authentication methods are required for a successful reset.
- ▸ SSPR reduces administrative overhead and help desk tickets by empowering users to manage their own credentials securely without IT intervention.
🎯 How does Self-Service Password Reset (SSPR) appear on the MS-102 Exam?
A scenario might describe a hybrid identity setup where users can reset passwords in the cloud, but the changes don't reflect on-premises. You will be asked to identify Password Writeback as the solution.
You may be asked to configure a security policy requiring users to provide two different verification methods before they are permitted to reset their password.
Expect questions regarding the specific licensing requirements needed to enable SSPR for users whose accounts are synchronized from an on-premises Active Directory domain.
❓ Frequently Asked Questions
What happens if a user attempts SSPR but hasn't registered any authentication methods?
The user will be unable to reset their password and must contact an administrator. To prevent this, admins should enable the 'Require users to register when signing in' setting.
Is Password Writeback enabled by default when SSPR is turned on?
No, Password Writeback must be specifically enabled in the Entra Connect settings and requires the appropriate P1 or P2 licensing to function in hybrid environments.