password reset

Self Service in Microsoft 365

January 16, 2021January 16, 2021
2 Comments
Entra
9 min read

One of the great things about Azure Active Directory is the capability of self-service. Maintaining security groups can be a laborious and cumbersome task to do. The same applies to resetting passwords, handing out licenses, permissions, applications, and privileged roles. What if I told you that you can delegate most of these tasks to your end-users, their managers, or product-and application owners? In this blog post, I will show you the built-in capabilities of self-service in Azure Active Directory, which…

Microsoft Secure Score Series – 15 – Do not expire passwords

September 6, 2020September 6, 2020
1 Comment
Entra, Secure Score, Security
4 min read

Research has found that when periodic password resets are enforced, passwords become less secure. Users tend to pick a weaker password and vary it slightly for each reset. If a user creates a strong password (long, complex and without any pragmatic words present) it should remain just as strong in 60 days as it is today. It is Microsoft’s official security position to not expire passwords periodically without a specific reason, and recommends that cloud-only tenants set the password policy…

Microsoft Secure Score Series – 11 – Turn on user risk policy

June 8, 2020June 23, 2020
6 Comments
Entra, Secure Score, Security
5 min read

With the user risk policy turned on, Azure AD detects the probability that a user account has been compromised. As an administrator, you can configure a user risk conditional access policy to automatically respond to a specific user risk level. For example, you can block access to your resources or require a password change to get a user account back into a clean state. Today, we take a look at Azure AD Identity Protection. More specifically, the ability to take…

What admins should know about the combined registration portal for Azure MFA and Self Service Password Reset

May 2, 2020November 18, 2022
10 Comments
Entra, Security
9 min read

The (long) title pretty much reveals the purpose of this blog post. This one was on my to-do list for a while now, and now the combined registration portal is General Available, the time was there. In my previous MFA-related blogs, I always encouraged my readers to turn on the combined registration portal, even when it was in public preview. But if you start using this portal, there are quite some settings that can change the user experience of the…

Microsoft Secure Score Series – 05 – Enable self-service password reset

March 30, 2020June 6, 2020
2 Comments
Entra, Secure Score, Security
10 min read

With self-service password reset in Azure AD, users no longer need to engage helpdesk to reset passwords. This feature works well with Azure AD dynamically banned passwords, which prevents easily guessable passwords from being used. In this blog post, we are going to take a look at Self Service Password Reset in Azure AD. Self Service Password Reset allows your users to quickly unblock their account without the help of IT staff or helpdesk. For readability, I use SSPR for…