Forum Discussion

csmithscf's avatar
csmithscf
Steel Contributor
Nov 29, 2017

Can we require MFA for SSPR enrollment?

Is there a way to require MFA for SSPR (self-service password reset) enrollment? This would be ideal for our tenant to ensure a valid user (not just having the password) authenticates with MFA, or ot...
Access Management
Conditional Access
Identity Management
MFA
SSPR
Nigelarnold's avatar
Nigelarnold
Copper Contributor

Hello

 

Did you manage to achieve this, we are looking at trying to work out the exact same scenario.

 

Conditional access for the SSPR setup process

 

Thanks

JonasBack's avatar
JonasBack
Steel Contributor
Apr 10, 2019

Nigelarnold portal.azure.com > Azure Active Directory > User Settings > Manage settings for access panel preview features > Users can use preview features for registering and managing security info – enhanced to Yes.

 

Then portal.azure.com > Azure Active Directory > Password reset > verify All is set and then under Registration you have "Require users to register when signing in?".

 

This will force MFA/SSPR registration the next time. Just prepare your users you will enable this because otherwise they will get confused. You can also, before forcing registration, ask everyone to manually perform registration at aka.ms/setupsecurityinfo. Not that you need to enable the preview feature above before this URL is available.

Resources