Self Service Password Reset (sspr) Project.

Empowering Users with Secure Password Management

Self-Service Password Reset (SSPR)

This is a service that enables users to reset their passwords without requiring assistance from the administrator or help desk.

Since users in subgroups will be working in multiple tenants as they collaborate on tasks, there is a tendency to forget passwords. This is the objective of this task.

INSTRUCTIONS

Members of the subgroups are to work on this task together. Collaboration for this task should be done on Teams only. Subgroup members should decide on how or who will be the administrator per task and to ensure maximum participation of members. Ensure that members of subgroups have their accounts created in each subgroup member tenant. When joining Teams Meeting, subgroup members should join with their created accounts on the tenant which you will be performing the task.

TASK

1. Create a group named Demo-Team in your Tenant using the Entra Admin Center. Members of this group should be subgroup members.

2. Configure SSPR with authentication methods email and phone.

3. Ensure Users register before using SSPR.

4. Enable SSPR for the group Demo-Team.

5. Members of the groups should test and verify SSPR is working.

6. Group Members should reset their password using SSPR with the configured authentication methods.

7. The administrator of the tenant should get the SSPR audit log and verify those who were able to successfully set up SSPR and reset their password.

SELF SERVICE PASSWORD RESET (SSPR) is a service that allows users to change or reset their password without needing assistance from the administrator or helpdesk.

SSPR offers some key features that enhance secure and user conveniences. These features help to reduce IT support cost, improve security and enhance productivity.

1. SSPR: Users can reset their expired or non-expired passwords without needing to contact an administrator or helpdesk.

2, Multi-Factor Authentication (MFA): Users must verify their identity using multiple authentication methods before resetting their password.

3. User Registration: Users register their authentication methods in advance, ensuring they can reset their passwords when needed.

4. Activity Reports: Administrators can access detailed reports on password reset and registration activities, helping them monitor and manage security.

5. Intuitive User Experience: The process is designed to be user-friendly, allowing users to reset passwords and unblock accounts from any device or location

TASK 1. CREATE A GROUP NAMED DEMO-TEAM and Add the members of your subgroup.

To create a group in Entra admin center.

In your browser search for entra.microsoft.com. On the Entra admin center click on group, click on all group and select new group.

Next fill in the necessary details and select create.

Demo-Team Group successfully created.

Attach is the screenshot of steps i used to create the group and added the members of my subgroup to the group.

TASK 2. Configure SSPR with authentication methods email and phone.

To Configure SSPR with email and phone authentication methods follow these steps:

Go to the Microsoft Entra admin center and sign in with your account.

Navigate to Password reset under Protection.

Under Properties, set SSPR enabled to Selected or All based on your organization and click on save to save the password reset policy.

Next, Select Authentication methods and choose Email and Mobile phone.

Configure the number of methods required to reset either one or two.

TASK 3. Ensure Users register before using SSPR.

In the Entra admin center, navigate to Password reset under Protection and select Registration.

Uder Registration, set required users to register when signing in to Yes.

Set the number of days before users are required to re-confirm their authentication information.

Click save to apply the changes

TASK 4. Enable SSPR for the group Demo-Team.

Under Properties, enable SSPR for the Demo-Team Group

Task 5 & 6. Members of the groups should test and verify SSPR is working.

Member of the group test and verify that SSPR is working by Login into their account and authenticate their Identity.

First, Member of the group will authenticate their account and choose the authenticate method they prefer based on the SSPR policy.

Then login in to reset their password and verify if it worked.

**Task 7.**The administrator of the tenant should get the SSPR audit log and verify those who were able to successfully set up SSPR and reset their password

Feel free to Like and Comment.

My Name is Theodora Egburedi.

M365 Technical Support Engineer.