Note: For users who have Password hash synchronization (PHS) disabled, SSPR stores the passwords in the on-prem Active Directory only. Users can use SSPR and perform password change from anywhere. In this scenario, users’ accounts stores in Azure AD and there is no integration with on-prem AD. In-cloud only users (where you can store the new password in Azure AD).Especially if you have multiple county-based organizations and time differences with countries it might be challenge for the organization to manage passwords.
Your Service Desk/Help Desk might receive a lot of calls and increase your resource cost or reduce users’ productivity to spend time wait for the Service Desk. If you are working in a large organization and have strict password change and account lock policy in on-prem AD, it might be challenge for you to manage password requests for the end users once the password expired or their account locked. In this most common scenario where password write back to on-prem Active Directory via AD Connect tool. Hybrid identity users (where on-premises Active Directory users syncs to Azure Active Directory via AD Connect tool).If you have one of the following environment you can benefit using the SSPR in organization. I am going to explain best practices of enabling the SSPR portal based on my field experience. SSPR Portal is accessible any location and device and easy to use by providing simple user experience even without sacrificing the security. Microsoft Azure Self Service Password Reset Portal (SSPR) provides users to reset/change password or unlock account without calling the Service Desk.
0 kommentar(er)
