question

vlonjati1997 avatar image
0 Votes"
vlonjati1997 asked JamesHamil-MSFT answered

disable self service password reset in Azure AD

I'm struggling to disable the self-service password reset to the tenant users. When trying to do a password reset they are asked to verify/enroll 2FA using a phone nr. and a verified e-mail(I want to disable the personal e-mail verification too).
108497-image.png

After successfully verifying both steps they can reset their password. The setup in Azure AD for password reset is as follows:
108574-image.png



108545-image.png




azure-active-directory
image.png (47.0 KiB)
image.png (33.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JamesHamil-MSFT avatar image
0 Votes"
JamesHamil-MSFT answered

Hi @vlonjati1997 , this is most likely due to Security Defaults: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

This thread has a lot of good information related to your question. I recommend looking through it and asking me any questions you may have!

If nothing here solved your issue please let me know and I can help you further.

If this answer helped you please mark it as "Verified" so other users may reference it.

Thank you,
James


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.