Password Management is an integral IAM Component which is built in as core mechanism managing user directory.  

As an IAM Administrator, you can configure password policies and reset mechanisms for your users.  

In this article, I’ll be showcasing how you configure password reset configuration in EntraID IAM.  

Configuring this will let the users reset their account passwords without raising a request to an IT Admin managing EntraID.

How to Configure Self Password Reset Feature in EntraID IAM

Microsoft Entra self-service password reset (SSPR) gives users the ability to change or reset their password, with no administrator or help desk involvement.

Follow these steps and hirarchy to configure password reset management features using Microsoft AzureAD or EntraID.  

EntraID Dashbaord > EntraID > Password Reset  

Navitage to EntraID Dashboard  

1. Login to EntraID Portal using either Global Admin or related role (Authentication Admin, Cloud Admin) RBAC Role 

2. You’ll find Password Reset Configuration under EntraID Section  

EntraID Password Reset Properties  

1. Open Password Reset – You’ll see various options now “Properties | Authentication Methods | Registration | Notifications etc  

2. Click Properties – Enable Self Service Password Reset to all  

This will allow all users in your IAM Directory to reset passwords on their own under “My Account Info” or they can also change windows device password if the device is EntraID or Intune Registered.  

Similarly, you can also choose None – If you do not allow this feature to be utilzied.  

Also, you can target specific Entra Groups by selecting “Selected” Option which will prompt you to add desired groups/Departments, example “Management” – “HR”  

Password Reset Authentication Method Verification 

1. Head over to Authentication Methods once completing “self-service password reset global tenant enable”   

2. Under Authentication methods – you can select which authentication methods are required for users to reset passwords.  

Here, I’ve selected “Email” and “Mobile Phone” as primary authentication recovery mechanisms.  

Let’s say user forgot his/her password, it’ll send OTP/authentication request to the user’s email and mobile. 

Password Reset Notification EntraID 

This step is optional, but if you want to enable notifications – you can simply navigate to notification tab: 

1. Enable “Notify Users on Password Resets”  

2. This will enable globally inside tenant and will send notifications to all users inside the EntraID Tenant  

Check out Similar Entra Resources:

1. Reset User Password as IT/Entra Admin
2. Create New User using EntraID

For more such IAM and Office 365 Administration Blogs and Resources – Stay tuned here