Get all users subscribed to the self-service password reset service

[Carlos Gomez]

Hi,

Is there a way to get the list of users already subscribed for the SSPR or the ones  that are still not joined to the service?

Regards.

[#2]

There are many reports available for that type of info, see https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-reporting.

The SSPR Funnel in the Azure AD Content Pack for Power BI may also be helpful, see https://docs.microsoft.com/en-us/azure/active-directory/active-directory-reporting-power-bi-content-...

[#3]

Thanks Dean,

I'm looking for more historical data, not for the last 30 days that AAD reporting provides, but it seems the we are the ones that should have stared collecting the historical data at our side, since I have not found any other solution.

"

Reporting API data retrieval limitations

Currently, the Azure AD Reports and Events API retrieves up to 75,000 individual events of the SsprActivityEvent and SsprRegistrationActivityEvent types, spanning the last 30 days.+

If you need to retrieve or store data beyond this window, we suggest persisting it in an external database and using the API to query the deltas that result. Our recommendation is to begin retrieving this data when you start using SSPR in your organization, persist it externally, and then continue to track the deltas from this point forward.

"

Regards.

[#4 · Accepted solution]

You are correct, I recently ran into this same issue with one of my clients.

This is just another example of needing to fully understand the capabilities and limitations of the tools while trying to keep up with the changes.

I would not be surprised to see these limits increased in the future.

[#5]

If you really need that data, there are 3rd party products, just saying :)

[#6]

Hi Vasil,

Could you share the names of the ones you know, just for reference.

Thanks.

[#7]

Have you found a way to do this yet or the names of the tools? I have the same issure with a client with more than 100 000 users.

[#8]

Hi

I would also like to know if you found a solution for this. I have a O365 tenant with 1.5mil+ users and need to list those who have not registered for SSPR.

Thanks in advance

J

[#9]

You can try below powershell script to get the SSPR registered users:

Get-Msoluser -All | where {$_.StrongAuthenticationUserDetails -ne $null} | Export-CSV -path <path to CSV file>

[#10]

That indeed shows which users that have registered for MFA. But is this the same as SSPR? In any way, in the new Converged registration for SSPR and MFA, this might all be the same.