Enforce SSPR Security Questions - Prevent Skipping

Question

Enforce SSPR Security Questions - Prevent Skipping

Raymond Brooks 366

SSPR is currently enabled for some users, but when they login they can skip setting their security questions temporarily.

Is there a way to prevent skipping and force the user to set their questions, whether manually or with PowerShell?

Accepted answer

1 additional answer

Your answer

Answer 1

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Moderator

Hello @Raymond Brooks , disabling to skip Azure AD SSPR security questions is not possible, however Azure AD will keep prompting them until they've been registered.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

Raymond Brooks 366 Reputation points

2023-05-23T02:18:22.33+00:00

Thanks, just needed something official :)

Answer 2

risolis 8,741

Hello @Raymond Brooks

Thank you for posting this concern on this community.

I wonder if you had any chance to read the following article down below:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-security-questions

I hope that can be useful for you.

Looking forward to hearing from you

Cheers,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Raymond Brooks 366 Reputation points

2023-05-20T05:57:32.28+00:00

Unfortunately this does not prevent the user from temporarily skipping. Thanks thoughh
risolis 8,741 Reputation points

2023-05-20T19:16:51.8+00:00

Hi

Did you read this segment?
risolis 8,741 Reputation points

2023-05-20T20:08:50.6166667+00:00
Raymond Brooks 366 Reputation points

2023-05-20T21:44:14.2266667+00:00

Yup tried that too, i can still skip
risolis 8,741 Reputation points

2023-05-21T01:04:38.5333333+00:00

Many thanks for that.

Now I wonder the following details below:

Is this a new user account?

Did you replicate the process? Like you forgot the password and then, you were prompted to answer the security questions....

Are you testing this using an Admin account or any other role?

Have you tried to use custom policies for it?

Regards.
Raymond Brooks 366 Reputation points

2023-05-21T01:47:44.8133333+00:00

I'm testing with brand new, non admin accounts, currently the only policy is a block policy. I looked at grant policies but there is no option to enforce SSRP which is what i'm trying to accomplish.
risolis 8,741 Reputation points

2023-05-21T02:28:14.4733333+00:00

Hi

Thanks for the quick answer.

Did you look for access conditional policy settings on the search bar?

Cheers
Raymond Brooks 366 Reputation points

2023-05-22T00:02:43.8933333+00:00

I'm not seeing any setting that would do this, i'm opening a ticket with support to see what if they have any suggestions. Will update if they have a resolution.
risolis 8,741 Reputation points

2023-05-22T00:40:41.47+00:00

Thanks a lot for your feedback.

Did you get to this setting?

Please keep me posted about it and thank you for letting me assist you in some way.

Have a good one!

Regards

Share via

Enforce SSPR Security Questions - Prevent Skipping

1 additional answer

Your answer