Self-Service Password Reset - Registration Methods

Question

Self-Service Password Reset - Registration Methods

H Raja 301

I've done an export of users under
Authentication methods > User registration details > Download

Looking at some users, I can see ssprRegistered and ssprEnabled - but the methodsRegistered column is blank. I wanted to know, how can these be registered users be enabled, but not show anything with method listed. Other users are fine and have different methods registered.

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2022-01-03T23:31:33.39+00:00

HRaja-6229
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Accepted answer

1 additional answer

Your answer

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2022-01-03T23:31:33.39+00:00

HRaja-6229
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 1

Andy David - MVP 157.4K MVP Volunteer Moderator

Yea, but if you look at the user sign in logs in Azure, are they actually attempting to login?
I would clear their authentication methods and maybe even disable the account if they arent active.

Andy David - MVP 157.4K Reputation points MVP Volunteer Moderator

2021-12-13T21:50:38.577+00:00

Whenever I have seen this, it a user who started the process and never completed it or an admin had cleared the MFA info later. In these cases, the account had not logged in in some time or had never tried to logon for whatever reason.
H Raja 301 Reputation points

2021-12-14T23:12:10.7+00:00

@Andy David - MVP Strange why MS would set this as an Enabled if not values have been populated. Ideally it would be good to show as Not Enabled

Answer 2

JamesTran-MSFT 36,906 Microsoft Employee Moderator

For the users who're registered/enabled, are they all in your Azure AD tenant? Or are these external users invited/sync'd to your tenant?

I tested this out within my tenant with a new user and after removing the methodsRegistered, my ssprRegistered and ssprCapable state changed.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

H Raja 301 Reputation points

2022-02-03T22:21:48.517+00:00

Thanks for testing and appreciated, our accounts are Sync'd from OnPrem. I've not cleared any Authentication Methods, it was just an export from the blade. That's when I noticed from my screenshot, that some users were SSPR Registered and SSPR Enabled - but methodsRegistered blank.
JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2022-02-04T17:03:36.31+00:00

@H Raja
Thank you for following up on this!

Since your user accounts are sync'd from on-prem, can double check if you Enabled password writeback for SSPR? This should've been done when installing Azure AD Sync. If this is enabled, Federated, pass-through authentication, or password hash synchronized users are able to reset their passwords. This could explain why you're seeing ssprRegistered/Capable - Enabled, but the methodsRegistered column left blank, since these users don't have any Azure AD registered methods. For more info: On-premises integration.

Navigate to your Azure Active Directory -> Select Password Reset under Manage -> On-premises integration

I've also reached out to our engineering team to see if they can confirm this, or if they have any other inputs.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Share via

Self-Service Password Reset - Registration Methods

1 additional answer

Your answer