ID-03MediumRecommended Secure

Enable Self-Service Password Reset

Identity & Authentication control for Microsoft 365 and Entra ID

Why This Control Matters

SSPR allows users to securely reset passwords without helpdesk intervention. It reduces password reset tickets by up to 70% while maintaining security through MFA verification during reset.

Expected State

When this control is compliant, your tenant should meet these criteria:

  • 1Self-service password reset (SSPR) is enabled for all users
  • 2At least two authentication methods are required for reset
  • 3Users are registered for SSPR via combined registration

Enforcement

Default Mode
Advisory

Alerts on deviations but does not make changes

Auto-Remediation
Manual Only

Requires Entra admin center configuration

Ready to implement this control?

TrueConfig continuously monitors your Microsoft 365 tenant for compliance with this and 50+ other security controls.