Don't lose access to your account!

Tomas_S_ · ‎Feb 15 2022

Hi,

I'm a global admin for our tenant and keep getting this when I'm logging in:

If I'm trying to enter anything other than my personal email address I will get this error message:

"Don't use your work or school email address, because you won't have access to it if you forget your password. "

Is there a way to edit the options? I think shoudn't have to give my personal email address here.

ChristianJBergstrom · ‎Feb 15 2022

Hi, this is the SSPR feature. You can edit the settings in Azure portal under Password reset.

Tomas_S_ · ‎Feb 15 2022

Thanks for the reply. I tried changing the settings there yesterday but there's a text box that says:

"These settings only apply to end users in your organization. Admins are always enabled for self-service password reset and are required to use two authentication methods to reset their password. Click here to learn more about administrator password policies."

And behind that link it says:

"By default, administrator accounts are enabled for self-service password reset, and a strong default two-gate password reset policy is enforced. This policy may be different from the one you have defined for your users, and this policy can't be changed. You should always test password reset functionality as a user without any Azure administrator roles assigned.

With a two-gate policy, administrators don't have the ability to use security questions.

The two-gate policy requires two pieces of authentication data, such as an email address, authenticator app, or a phone number."

So the authenticator app should be an option too but I don't see it and instead it's asking me for my phone number and my personal email address.