Self Serivce Password Reset Registration Options

Question

question

MichaelJMiller-3936 asked Apr 22, '22 MichaelJMiller-3936 commented Apr 26, '22

Self Serivce Password Reset Registration Options

Hello all,

We are preparing to deploy SSPR and my director does not want end users to use the phone method to register for the service. He wants all users to only have the option to use the Authenticator app and the security questions. We are deploying 2 factor authentication and have the Authenticator, phone, and questions as the methods available. Our current play is instructing users to register then add the Authenticator method and remove the phone method. My question is can I force the Authenticator as part of the registration or at least add it to the registration page? Please see attached screenshot.

Thanks in advance

azure-ad-sspr

sspr.jpg (50.6 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-23T01:53:57.99Z

DavidBroggy-5270 answered Apr 23, '22 MichaelJMiller-3936 commented Apr 25, '22

Hi @MichaelJMiller-3936

you can customize the SSPR page, have you seen this article?
howto-sspr-customization

If this helps, please accept this solution and upvote, thank you!

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MichaelJMiller-3936 · Apr 25 at 01:14 PM

Thank you for the response. Unfortunately, that page only deals with the cosmetic/images of the site and as far as I can tell does not address the methods. Please let me know if I've missed something.

Thanks,

Michael

0 ·

Answer 2 · 2022-04-25T21:21:19.007Z

JamesHamil-MSFT answered Apr 25, '22 MichaelJMiller-3936 commented Apr 26, '22

Hi @MichaelJMiller-3936 , thanks for the question. Sorry for the delay in response! If I understand your question correctly , you can configure this in the MFA settings.

You can change the verification options and remove all but "verification code from mobile app or hardware token" and this should solve your problem.

Please let me know if you have any questions or if I misunderstood your question.

If this answer helped you please mark it as "Verified" so other users can reference it.

Thank you,

James

microsoftteams-image-19.png (313.8 KiB)

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MichaelJMiller-3936 · Apr 26 at 12:40 PM

Hey James,

Thanks for the response. We are not currently deploying MFA to our end users, and I know the combination service is coming soon, right now we are just rolling out SSPR. If my user base is not enrolled in MFA will these settings still take effect? My current SSPR configuration and the options the end user receives when registering for SSPR below. I have enabled the minimum number of options for two fact SSPR.

.

0 ·

sspr.jpg (50.6 KiB)

image.png (46.7 KiB)

question