Challenges with New MFA and SSPR Policies: Need Guidance

I am currently transitioning our Self-Service Password Reset (SSPR) and Multi-Factor Authentication (MFA) to the new Authentication Methods policy, moving away from legacy policies. However, the lack...

Authentication

Authenticator app

Identity

multi-factor authentication

Passwords

Kidd_Ip

MVP

Oct 21, 2024

brentmattson

You are correct that not all authentication methods are supported across both MFA and SSPR. Specifically, security keys (FIDO2) are currently not supported for SSPR:

How to migrate to the Authentication methods policy - Microsoft Entra ID | Microsoft Learn

Combined registration for SSPR and Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn

Manage authentication methods - Microsoft Entra ID | Microsoft Learn

Enable Microsoft Entra self-service password reset - Microsoft Entra ID | Microsoft Learn

brentmattson
Brass Contributor
Oct 21, 2024
Do you know if that is by design or if the FIDO2 keys will eventually support SSPR?

Forum Discussion

Challenges with New MFA and SSPR Policies: Need Guidance

Share

Resources