Unable to remove legacy SSPR authentication methods

Question

Dear community,

in order to complete the migration to the new authentication methods, one must remove all legacy methods, available at the shown location.

Unfortunately reading the current values fails with the above message, so I'm not able to complete the migration, which also fails with a message: "Couldn't save new migration state: you cannot move to migration complete until disabling all methods in the legacy SSPR policy." In order to disable all methods in the old legacy SSPR policy I need access to the displayed location on the screenshot.

So I'm sticking at this point and don't know how to continue. Any help is highly welcome.

Thank you in advance.

Kind regards,

K.Z.

Answer 1

Hi,

403 Error seems like a RBAC role issue, do you have full access or delegated access to the Azure Tenant to make changes? Check with the tenant admin to provide access so you can make changes to this policy.

Also with regards to Password policy check if you have combined registration option enabled on the tenant - https://learn.microsoft.com/en-gb/azure/active-directory/authentication/concept-registration-mfa-sspr-combined

Hope this helps.

JS

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.