Forum Discussion
srinivasyk
Oct 05, 2021Copper Contributor
Azure SSPR User Experince Issue
Hi All, We are configuring Azure SSPR for a customer. We set authentication methods using phone number when they join the organisation and send the SSPR link so that they can set their own new passw...
srinivasyk
Oct 06, 2021Copper Contributor
Hi BilalelHadd
Yes we have enabled the "Combined registration feature"
1 authentication method among phone,email and mobile app code
Yes we have enabled the "Combined registration feature"
1 authentication method among phone,email and mobile app code
BilalelHadd
Oct 06, 2021Iron Contributor
srinivasyk
I can't explain why you see the screen with the two options. However, I can help you with setting the flag for "forcing the password to change at the next logon," therefore you need to run the below command on your Azure AD connect server:
Set-ADSyncAADCompanyFeature -ForcePasswordChangeOnLogOn $true
As soon as the value (checkbox) has been set within AD, it should synchronize to AAD.
More information regarding this feature can be found in this docs article:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization
Section: Synchronizing temporary passwords and "Force Password Change on Next Logon"
I can't explain why you see the screen with the two options. However, I can help you with setting the flag for "forcing the password to change at the next logon," therefore you need to run the below command on your Azure AD connect server:
Set-ADSyncAADCompanyFeature -ForcePasswordChangeOnLogOn $true
As soon as the value (checkbox) has been set within AD, it should synchronize to AAD.
More information regarding this feature can be found in this docs article:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization
Section: Synchronizing temporary passwords and "Force Password Change on Next Logon"
- srinivasykOct 10, 2021Copper ContributorThanks BilalelHadd