1. Recording Brief EMS Partner Bootcamp Variables Values Module Title
TechReady 18
4/28/2018
Recording Brief
Variables
Values
Module Title
Azure Active Directory I
Chunk Title
Self Service Password Reset (SSPR)
Content Slides 4
Lab Slide No
Demo Slide
Yes
Estimated Delivery Time
11 minutes
EMS Partner Bootcamp
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Self Service Password Reset (SSPR)
TechReady 18
4/28/2018
Module: Azure Active Directory 1
Self Service Password Reset (SSPR)
EMS Partner Bootcamp
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Self Service Password Reset SSPR
Hybrid/Cloud Scenarios
SSPR in the cloud only
Cloud only users (non-Hybrid)
Different password on-premises and cloud
SSPR with Password Hash Sync (with Password Writeback)
SSPR + ADFS (with Password Writeback)
Password Scenarios
Password Change *
Admin Initiated Password Reset *
User Initiated Password Reset
User registration
Account Unlock
Separate from SSPR

4. SSPR Password Write back
TechReady 18
4/28/2018
SSPR Password Write back
Supports resetting passwords for users using ADFS or other federation technologies. With writeback, as long as users are sync'd into your cloud tenant, they'll be able to manage their local AD passwords from the cloud.
Supports resetting passwords for users using password hash sync. When the password reset service detects a user is enabled for password hash sync, we reset both her on-prem and cloud password simultaneously.
Enforces your local AD and cloud AD password policies. When a user resets her password, we first ensure that it meets your local and cloud AD password policies before committing it to any directory.
Doesn't require any new firewall rules
Support resetting locked out accounts
Reports for Admins to track SSPR usage
Firewall -Password writeback uses an Azure Service Bus relay as an underlying communication channel, meaning that you do not have to open any new ports on your firewall for this feature to work.
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Demo Self Service Password Reset (SSPR)
TechReady 18
4/28/2018
Demo Self Service Password Reset (SSPR)
Demo
End User experience – cloud and federated user (password writeback)
Admin setup of SSPR, Writeback
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. SSPR User Registration Options
Edit users in the Azure Management Portal or the Office 365 Management Portal Use AADSync to synchronize user properties into Azure AD from an on-premises Active Directory domain Use Windows PowerShell to edit user properties Allow users to register their own data by guiding them to the registration portal at Require users to register for password reset when they sign in to the Access Panel at by setting the Require users to register SSPR configuration option to Yes.