Disabling SSPR security questions

Question

Disabling SSPR security questions

Cokic, Emina 21

If the SSPR security questions are disabled/turned off - is this possible? - after users have already registered, how does this affect the user? Will the user have to re-register? Thanks!

0 comments

Answer accepted by question author

1 additional answer

Your answer

Answer 1

AmanpreetSingh-MSFT 56,966 Moderator

Hello @Cokic, Emina Welcome to QnA platform and thanks for your query.

Yes, you can disable security questions for after users have registered with this authentication method for SSPR. If you do so, users would have to re-register using the new authentication method that you select. For example, if you disable Security Questions method and enable Phone authentication, users would be required to register for phone authentication. Users not registered for new authentication method, will fail to reset their passwords with following error:

We're sorry
You can't reset your own password because you haven't registered for password reset.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Cokic, Emina 21 Reputation points

2020-10-05T16:30:22.647+00:00

Thanks very much for your response.

Currently, we have 5 enabled authentication method options, one of the 5 is the security questions option. We have decided we don't need the security questions options and would like to turn it off/disable it.

So, my question is, if we disable it now, will we invalidate currently registered users? I.e will the already registered users have to re-register even though they have registered at least 2 authentication methods on top of security questions?
AmanpreetSingh-MSFT 56,966 Reputation points Moderator

2020-10-06T08:37:54.127+00:00

Hi @Cokic, Emina · If users already have registered 2 authentication methods on top of security questions, they will NOT be required to re-register. Re-registration will only be required if user have registered for only 2 methods which includes Security Questions and user is required to go through 2 authentication hurdles for performing SSPR.
Cokic, Emina 21 Reputation points

2020-10-06T09:21:45.367+00:00

Thanks very much!

Answer 2

Alexandre E Capita 71

It will not be requested as it is turned off, unless you have another authentication method enabled.

0 comments

Share via

Disabling SSPR security questions

1 additional answer

Your answer