Quickstart: Self-service password reset

In this quickstart, you walk through configuring self-service password reset (SSPR) as a simple means for IT administrators to enable users to reset their passwords or unlock their accounts.


Enable self-service password reset

View this process as a video on YouTube

  1. From your existing Azure AD tenant, on the Azure portal under Azure Active Directory select Password reset.

  2. From the Properties page, under the option Self Service Password Reset Enabled, choose Selected.

    • From Select group, choose your pilot group created as part of the prerequisites section of this article.
    • Click Save.
  3. From the Authentication methods page, make the following choices:

    • Number of methods required to reset: 1

    • Methods available to users:

      • Email
      • Mobile app code (preview)
    • Click Save.

      Choosing authentication methods for SSPR

  4. From the Registration page, make the following choices:

    • Require users to register when they sign in: Yes
    • Set the number of days before users are asked to reconfirm their authentication information: 365

Test self-service password reset

Now lets test your SSPR configuration with a test user. Since Microsoft enforces strong authentication requirements for Azure administrator accounts, testing using an administrator account may change the outcome. For more information regarding the administrator password policy, see our password policy article.

  1. Open a new browser window in InPrivate or incognito mode, and browse to https://aka.ms/ssprsetup.
  2. Sign in with a non-administrator test user, and register your authentication phone.
  3. Once complete, click the button marked looks good and close the browser window.
  4. Open a new browser window in InPrivate or incognito mode, and browse to https://aka.ms/sspr.
  5. Enter your non-administrator test users' User ID, the characters from the CAPTCHA, and then click Next.
  6. Follow the verification steps to reset your password

Clean up resources

It's easy to disable self-service password reset. Open your Azure AD tenant and go to Properties > Password Reset, and then select None under Self Service Password Reset Enabled.

Next steps

In this quickstart, you’ve learned how to quickly configure self-service password reset for your cloud-only users. To find out how to complete a more detailed roll out, continue to our roll out guide.