Enable Azure AD self-service password reset

Sign in to the Azure portal using a Global Administrator account.

Click Azure Active Directory -> Password reset

Start with a pilot group by enabling self-service password for a subset of users in your organization.

  • From the Properties page, under the option Self Service Password Reset Enabled, choose Selected and pick a pilot group
    • Only members of the specific Azure AD group that you choose can use the SSPR functionality
    • Nesting of security groups is supported here.
    • Ensure the users in the group you picked have been appropriately licensed
  • Click Save

On the Authentication methods page

  • Set the Number of methods required to reset to 2
  • Choose which Methods available to users your organization wants to allow
  • Click Save

On the Registration page

  • Select Yes for Require users to register when signing in
  • Set Number of days before users are asked to reconfirm their authentication information to 180
  • Click Save

On the Notifications page

  • Set Notify users on password resets option to Yes.
  • Set Notify all admins when other admins reset their password to Yes

On the Customization page

  • Set Customize helpdesk link to Yes and provide either an email address or web page URL where your users can get additional help from your organization in the Custom helpdesk email or URL field

Self-service password reset is now configured for cloud users in your pilot group.