Wednesday, 4 May 2016
Allow users of Office 365 to reset their own passwords.
This article is for office365 paid subscriptions managed by account administrator. Enabling your users to manage their own cloud Azure Active Directory passwords takes just a few simple steps. After ensuring that you've met a few simple prerequisites, you'll have password change and reset enabled for your entire organization before you know it. This article will walk you through the following concept.
Active directory on premise required extra steps.
Step 1. First login portal.office.com
Step 2. Next click on link for the Azure AD portal
Note: You may need to active your subscription if not already done.
In the Azure Management Portal, find the Active Directory extension on the navigation bar on the left hand side.
Step 3. Under the Directory tab, click the directory in which you want to configure the user password reset policy,
Step 4. Click the Configure tab.
Step 5. Under the Configure tab, scroll down to the user password reset policy section. This is where you configure every aspect of user password reset policy for a given directory.
This policy applies only to end users in your organization, not administrators. For security reasons, Microsoft controls the password reset policy for administrators. If you do not see this section, make sure that you have signed up for the Azure Active Directory Premium or Basic and assigned a license to the administrator account that is configuring this feature.
Azure AD Password Management.
Step 6.After configuring user password reset policy as desired for your tenant, click the Save button at the bottom of the screen.
A two challenge user password reset policy is recommended so that you can see how the functionality works in the most complex case.
Step 7. Set Number of Authentication Methods Required. To 2
Step 9. Now we now need to go back to the office 365 portal and add the users that are allowed to the SSPRSecurityGroupUsers
Follow the steps for verification. Make sure that you have your phone and email address handy.