question

MichaelJMiller-3936 avatar image
0 Votes"
MichaelJMiller-3936 asked MichaelJMiller-3936 commented

Self Serivce Password Reset Registration Options

Hello all,

We are preparing to deploy SSPR and my director does not want end users to use the phone method to register for the service. He wants all users to only have the option to use the Authenticator app and the security questions. We are deploying 2 factor authentication and have the Authenticator, phone, and questions as the methods available. Our current play is instructing users to register then add the Authenticator method and remove the phone method. My question is can I force the Authenticator as part of the registration or at least add it to the registration page? Please see attached screenshot.

Thanks in advance195626-sspr.jpg


azure-ad-sspr
sspr.jpg (50.6 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DavidBroggy-5270 avatar image
0 Votes"
DavidBroggy-5270 answered MichaelJMiller-3936 commented

Hi @MichaelJMiller-3936

you can customize the SSPR page, have you seen this article?
howto-sspr-customization



If this helps, please accept this solution and upvote, thank you!

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for the response. Unfortunately, that page only deals with the cosmetic/images of the site and as far as I can tell does not address the methods. Please let me know if I've missed something.

Thanks,

Michael

0 Votes 0 ·
JamesHamil-MSFT avatar image
0 Votes"
JamesHamil-MSFT answered MichaelJMiller-3936 commented

Hi @MichaelJMiller-3936 , thanks for the question. Sorry for the delay in response! If I understand your question correctly , you can configure this in the MFA settings.

You can change the verification options and remove all but "verification code from mobile app or hardware token" and this should solve your problem.

196412-microsoftteams-image-19.png

Please let me know if you have any questions or if I misunderstood your question.

If this answer helped you please mark it as "Verified" so other users can reference it.

Thank you,

James


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hey James,

Thanks for the response. We are not currently deploying MFA to our end users, and I know the combination service is coming soon, right now we are just rolling out SSPR. If my user base is not enrolled in MFA will these settings still take effect? My current SSPR configuration and the options the end user receives when registering for SSPR below. I have enabled the minimum number of options for two fact SSPR.



196560-image.png
196622-sspr.jpg.


0 Votes 0 ·
sspr.jpg (50.6 KiB)
image.png (46.7 KiB)