Forum Discussion
srinivasyk
Oct 05, 2021Copper Contributor
Azure SSPR User Experince Issue
Hi All, We are configuring Azure SSPR for a customer. We set authentication methods using phone number when they join the organisation and send the SSPR link so that they can set their own new passw...
BilalelHadd
Oct 06, 2021Iron Contributor
Hi srinivasyk
I have some questions before I make a suggestion. First, did you enable the "Combined registration feature" already in your tenant? And how many authentication methods did you configure within your tenant?
I have some questions before I make a suggestion. First, did you enable the "Combined registration feature" already in your tenant? And how many authentication methods did you configure within your tenant?
- srinivasykOct 06, 2021Copper ContributorHi BilalelHadd
Yes we have enabled the "Combined registration feature"
1 authentication method among phone,email and mobile app code- BilalelHaddOct 06, 2021Iron Contributorsrinivasyk
I can't explain why you see the screen with the two options. However, I can help you with setting the flag for "forcing the password to change at the next logon," therefore you need to run the below command on your Azure AD connect server:
Set-ADSyncAADCompanyFeature -ForcePasswordChangeOnLogOn $true
As soon as the value (checkbox) has been set within AD, it should synchronize to AAD.
More information regarding this feature can be found in this docs article:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization
Section: Synchronizing temporary passwords and "Force Password Change on Next Logon"- srinivasykOct 10, 2021Copper ContributorThanks BilalelHadd