Combined MFA and password reset registration is now generally available
The 16th April, Microsoft announced that the combined security information registration is now generally available.
This new experience makes it easy for users to register for Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR) in a simple step-by-step process.
Now, when users register while signing in on their phone, they’ll see this easy step-by-step experience:
Microsoft simplified the web experience too! Here’s what that looks like:
Once a user completes registration, they’ll see an overview of what they registered to confirm the information is correct and then they’re back to work!
Managing Security Info
From the Security info page, users can easily change their default authentication method or update security info such as their phone number. From here they can also add, delete, or change a method.
From this page users can also add a security key:
Conditional Access for Registration
As part of this update, Microsoft made Conditional Access for the combined MFA and password reset registration experience generally available too!
This helps ensure it’s the right user—not an attacker—registering this sensitive info.
Even though the feature is now generally available, the new user experience isn’t automatically available yet.
To enable the enhanced security info registration experience, follow these steps:
- Sign into the Azure portal as a global administrator or user administrator.
- Browse to Azure Active Directory > User settings > Manage settings for access panel preview features.
- Under Users you can use the preview features for registering and managing security info – enhanced, you can choose to enable for a Selected group of users or for All users.
If you’re still using the old experiences for registering for MFA and SSPR, start making plans to move to this awesome new experience.
To learn more about security keys, check out our previous blog about Azure AD support for FIDO2-based passwordless sign-in.
To learn more, check out our previous blog about Conditional Access for the combined MFA and SSPR registration experience.