Restrict SSPR with Conditional Access Policy

Question

I'd like to know if you can or request the ability to restrict access to the SSPR site by using Conditional Access Policies. I know you can setup a CA for registrations but it would be nice if you could restrict SSPR reset requests for your tenant to certain locations.

Is there a way to do this?

Answer 1

Yes - follow https://www.alitajran.com/secure-mfa-and-sspr-registration/

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

The way to solve this is for Entra to surface SSPR as an app that can be targeted with a CA policy that you can scope or block to or from a location, require device compliance etc... This is something many would welcome and have asked for many times.