Forum Discussion
Self Service Password Reset with Password Writeback
I am looking into exploring the option for Self Service Password Resets on Office 365, and since this is a hybrid I am going to enable password writeback. Everything works great but I have a question...
Here is my experience. I am 100% in the cloud, office 365, no hybrid. First I set up MFA on my shared account. Second, I block logon to my shared accounts. Anyone who has been granted DELEGATE ACCESS can access this shared account from any Outlook session (cell phone, web browser, outlook on the desktop).
Technically MFA is nonexistent when an account is blocked., But I do the MFA in the off chance a malicious attempt enables this account.
Technically MFA is nonexistent when an account is blocked., But I do the MFA in the off chance a malicious attempt enables this account.
Thanks for the info everyone. Sounds like the best workaround is to just enable MFA for everyone.
Although I am wondering if you can use Active Directory delegation to restrict the password writeback, but my concern would be that it could cause other issues.