SSPR Feature and Licensing in Microsoft Entra ID

Question

Hello

I have a few questions regarding the Self-Service Password Reset (SSPR) feature in Microsoft Entra ID, as I am currently testing this functionality along with other features.

I would like clarification on the following points:

Licensing Requirements:

• Is the SSPR feature only available if tenant is P1 license?
• Are there additional charges per user for utilizing this feature if the organization has a P1 license?

Charges:

• How are the features charged? Is there a fee incurred when enabling the following functionalities on Microsoft Entra ID?
  • SSPR
  • Bad Password Protection
  • Password Writeback to the on-premise environment
  • Password Hash Synchronization
  • Among others

Or these features are in one single package?

Regards

Answer 1

If you are writing back to on-prem, then you need the following:

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-licensing#compare-editions-and-features

Password protection licensing:

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad#license-requirements

Answer 2

• SSPR for cloud only users is available for business standard license (P1 or P2 is not required).
• Hybrid user pwd reset and writeback to on-premise, you need Business premium.
• For custom banned password, you need P1 or P2.