Azure SSPR User Experince Issue

Question

Azure SSPR User Experince Issue

Srinivas Kidambi 61

Hi All,

We are configuring Azure SSPR for a customer. We set authentication methods using phone number when they join the organisation and send the SSPR link so that they can set their own new password. We are seeing a page(Page we are seeing.png in the attachment) where it comes up with "I forgot my password" and "I know my password but still can't log in" misinterpreting that user has already set the password. We expect the(expected page.png -attachment) page where it straight away takes the user to verification step using phone number and set their first password.

We tried forcing the user to change password at next logon which didn't help and tweaked few other setting Password reset as well but no luck.

Is there any setting on a user or configuration in Azure AD to force the expected page to be visible when the user inputs their id?

Password write back is enabled to AD from Azure.

Any input is appreciated..Thanks!!

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Vipul Sparsh 16,331 Microsoft Employee Moderator

@Srinivas Kidambi Thanks for the patience and collaboration on this while we took this offline.

The behavior you are seeing is only for Hybrid Tenants and not for Cloud Only tenants. This setting in SSPR configuration page controls it :
https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#allow-users-to-unlock-accounts-without-resetting-their-password

-----------------------------------------------------------------------------------------------------------------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Vipul Sparsh 16,331 Reputation points Microsoft Employee Moderator

2021-10-06T07:30:27.32+00:00

@Srinivas Kidambi Thanks for reaching out. I just tested this with 2 user account, I see the standard page with password reset option :

Can you let us know the following ?

1) What is the password reset URL that you used ?
2) If other users try this who do not have phone as auth method set, do they experience the default behavior for SSPR ?
Srinivas Kidambi 61 Reputation points

2021-10-06T08:45:00.543+00:00

Thanks @Vipul Sparsh .In my lab I am getting the page like you as expected but not in the customer environment.

URL I use: https://passwordreset.microsoftonline.com/?username=XXXX[@](/users/na/?userId=19d591f5-0000-0003-0000-000000000000).com
Users get a message to contact admins If they dont authentication phone set.
Vipul Sparsh 16,331 Reputation points Microsoft Employee Moderator

2021-10-06T08:51:04.543+00:00

@Srinivas Kidambi Seems they have a custom portal for that. Are they also redirecting the user to https://passwordreset.microsoftonline.com/?username=XXXX[@](/users/na/?userId=19d591f5-0000-0003-0000-000000000000).com

Is this a Azure AD b2c setup ?
Srinivas Kidambi 61 Reputation points

2021-10-06T09:27:54.26+00:00

Yes the same link.. It is not B2C setup..
Vipul Sparsh 16,331 Reputation points Microsoft Employee Moderator

2021-10-06T10:11:05.57+00:00

@Srinivas Kidambi The next place I would check is Customization URl for SSPR. Check if they have setup anything custom here :
Srinivas Kidambi 61 Reputation points

2021-10-06T10:24:52.42+00:00

@Vipul Sparsh Yes they have configured a helpdesk email in "customise" optopm but that doesn't seem to have any effect. I get the same page in my lab with both on and off options.
Vipul Sparsh 16,331 Reputation points Microsoft Employee Moderator

2021-10-06T11:37:02.727+00:00

@Srinivas Kidambi Lets take this offline to check further. Drop us an email at azcommunity@microsoft.com with subject "Atten-Vipul" and mention your Azure Subscription ID in body. I will reach out to you accordingly.

Share via

Azure SSPR User Experince Issue

0 additional answers

Your answer