Share via

Different SSPR methods depending on security group members

Jesmond Navarro 0 Reputation points
2023-09-30T15:59:37.41+00:00

Hi,

I have a scenario where I need to configure SSPR using a mobile phone number to members of a security group. However, being in a school, I need to configure SSPR to students using an alternate email address. Students are residing in another security group.

I cannot find a way on how to apply different SSPR configuration to different security groups.

Can someone please guide me on how this can be done?

Thanks in advance

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,629 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 36,411 Reputation points Microsoft Employee
    2023-10-02T23:32:59.3766667+00:00

    Hi @Jesmond Navarro ,

    You are correct that the scenario you described is not supported. You can select which group SSPR is available for, but you cannot differentiate which method is to be used per group. The SSPR configuration applies to your entire directory, so you can't allow one group to reset passwords one way and another to do it a different way.

    User's image

    There are some open feedback requests in the Ideas portal for this feature, though. https://feedback.azure.com/

    0 comments