Prevent SSPR Outside Company Network

Iron Contributor

Hi All


Is it possible to restrict SSPR to when users are on-site / company LAN.


I know there is the combined MFA and password reset registration Conditional Access but this seems for SSPR / MFA Regist...


Info appreciated

3 Replies
Hi there Stuart!

There is no other way than enabling combined registration and doing it the way you linked.

@Thijs Lecomte 


Hmmm, not great.


How about revoking MFA sessions for user? That would force them to re-register for MFA onsite?


Any similar solution for passwords?





It's not possible natively through AAD. You could create some custom Graph API script, but even that won't fully solve your issue.