Prevent SSPR Outside Company Network

[Stuart King]

Hi All

Is it possible to restrict SSPR to when users are on-site / company LAN.

I know there is the combined MFA and password reset registration Conditional Access but this seems for SSPR / MFA Regist...

Info appreciated

[#2]

Hi there Stuart!

There is no other way than enabling combined registration and doing it the way you linked.

[#3]

@Thijs Lecomte 

Hmmm, not great.

How about revoking MFA sessions for user? That would force them to re-register for MFA onsite?

Any similar solution for passwords?

Regards

[#4]

It's not possible natively through AAD. You could create some custom Graph API script, but even that won't fully solve your issue.