Different SSPR methods depending on security group members

Jesmond Navarro 0 Reputation points


I have a scenario where I need to configure SSPR using a mobile phone number to members of a security group. However, being in a school, I need to configure SSPR to students using an alternate email address. Students are residing in another security group.

I cannot find a way on how to apply different SSPR configuration to different security groups.

Can someone please guide me on how this can be done?

Thanks in advance

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,848 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 34,786 Reputation points Microsoft Employee

    Hi @Jesmond Navarro ,

    You are correct that the scenario you described is not supported. You can select which group SSPR is available for, but you cannot differentiate which method is to be used per group. The SSPR configuration applies to your entire directory, so you can't allow one group to reset passwords one way and another to do it a different way.

    User's image

    There are some open feedback requests in the Ideas portal for this feature, though. https://feedback.azure.com/

    0 comments No comments