SSPR is a functionality which requires at least Azure Active Directory Premium P1 licensing for all users using its functionality. The functionality relies on the fact that users have a 2nd authentication factor configured and needs to be setup first by the user before it can be used. This can save you a lot of support calls. Companies especially see this happening after holidays, where end users returning from their holiday have forgotten their password.īy enabling Self Service Password Reset (SSPR) in your Azure Active Directory you can delegate the task of resetting a password back to the user. If users work primarily on their Windows 10 modern workplace and sign-in using their biometric details or PIN, they might forget their password though since it’s never asked. So, by forcing users to create complex passwords and by making sure that common passwords cannot be used anymore and by using multi-factor authentication techniques we can keep the account more secure. Nowadays Microsoft even recommends to not set any password expiration policies because passwords which expire make users select predictable passwords, composed of sequential words and numbers which are closely related to each other. Due to this, user don’t login with their password all the time. On modern workplaces we use authentication techniques provided by Windows Hello for Business, like biometric and PIN.
0 kommentar(er)
