[ms office - o365] Self service Password reset

[sippo]

Does anyone have this enabled? Do you find it useful?

[Steve21]

Had a look at it previously, but didn't really see the point overall (But I guess now with more remote working etc might be more useful). Original reason being as it requires a users personal email and/or phone number, for students they can't access those in school in the first place to reset them (and wouldn't want to store those details personally), and staff on-site wouldn't bother using it

 

Steve

[psydii]

We enabled it on a case by case basis to allow secure password setting during lockdown.

The process would run something like:

request to the service desk to reset password (either from parent or student's personal email)

We then bounced it by the Form Tutor for validation. (is it really the student in question, do we have any concerns regarding the parent etc.)

If ok to proceed, we then contacted the student to confirm what mobile number they would like to have set as their SSPR confirmation number.

We then put this into AzureAD. Only User administrators in AzureAD and the user have access to this number and it typically is never displayed during normal admin tasks.

 

 

We also have used it extensively to on-board new staff, governors, and PTA based support groups. Feedback from users is it gives a very professional feel to the experience.

[robyholmes]

A couple of days before lockdown we enabled this. You need to ask for a second authentication method first (Email, Phone or Security questions which you can create your own). It's been extremely useful during lockdown and also meant we could on board our Year 6 students with them resetting password as there first task once logged in.

[timbo343]

We've just bought it today and i've just configured it with a test account.

 

The MS notes here: https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr are very straight forward. The only thing i'm a bit unsure about is what our SLT will think to asking for another form of ID, though this is the world we live in these days.

 

Thank fully, resetting the Azure password and having WriteBack into the OnPrem AD means the password is then sync'd over to GSuite too. It all just seems to work - until of course our internet feed at work dies.

 

But at least it means those that claim they have forgotten their details are now able (once i've assigned the licenses) to reset their passwords where ever they are in the world. Happy days.

[mdrabble]

Would all users who use this services need a P1 license??

[timbo343]

Would all users who use this services need a P1 license??

 

Yeah they do. In office365 there are 2 different types of license - one for staff and one for students.