Implementing password management
One of the common challenges faced by IT administrators is responding to user requests to reset forgotten passwords. This issue is addressed in Azure AD by SSPR.
SSPR allows Azure AD users to reset their passwords without having to contact the IT department. In order to use this feature, users must complete a registration process during which they need to choose one or more authentication methods set up by the administrators in Azure AD.
When planning for SSPR, you need to consider the different types of user identities within your Microsoft 365 tenant and how SSPR will behave when users wish to reset their own passwords. These are as follows:
- In-cloud users only
- Hybrid identity users
Both user types can register for and use SSPR, but the experience and license requirements will differ. For in-cloud users only, passwords are stored within Azure AD. On the other hand, hybrid identity users need to have password writeback enabled...