How to configure self-service password reset for users in Windows Azure AD

Sign in to queue

Description

In this Windows Azure Active Directory feature spotlight video, we demonstrate how you can enable self-service password reset for users in your organization. By default, your Windows Azure AD directory comes with a free feature that allows every directory admin to perform their own self-service password reset. Now, with the self-service password reset for users feature available in the Windows Azure Active Directory Premium paid preview, you can now quickly turn on policy that will extend the same rich admin capabilities to all the users in your directory.

Enjoy! Please take 30 seconds to leave feedback.

Nick Pierson

Windows Azure

Embed

Download

The Discussion

  • User profile image
    lindsay

    Hey thanks for sharing this beautiful video. Now its an sprank that there would be no more need of and third part tool any more. Coming to the part please update is it like i have an done the set up according to the said steps, would it be for an single user of AD or if in case for all the user that are in to a domain. Please update else then at that case we would have to use any of the third party tools for the same.

    Thanks.

  • User profile image
    NickPierson

    Hi Lindsay,

    Thanks for your comment. Yes, when you set the User Password Reset Policy to ALL, every user in that directory can then start resetting their own passwords. More details can be found here.... http://technet.microsoft.com/en-us/library/dn510386.aspx.

    Thanks,

    Nick Pierson

  • User profile image
    Lindsay

    Hi Nick thanks for your valuable comment. Its like for instance i had enable for all user , but like once i have enable then how would i intimate all the user that they can avail the facility of self reset , they wouldn't be distbuing me . Please update this so that i can start with a test envoriment.

    Thanks

  • User profile image
    NickPierson

    Hey Lindsay,

    The key thing is that their must be contact data in the directory for each user before they will be able to use the service. This means you will need to either enter the contact data manually, sync it in, or provide it programmatically in some fashion as I explain in the video. In the topic I provided a link to in my last comment there is this blurb:

    "In order for users to take advantage of self-service password reset functionality, their cloud user accounts must be updated with the correct contact data to ensure that they can pass through the appropriate number of password reset challenges defined by their administrator."

    Basically, this means that if you have enabled the service for all users in your cloud directory and only 5 users actually have their contact data specified in your cloud directory, only those 5 will be able to use the self-service password reset capabilities.

    There's a user registration portal that you can send to your users so they can get that data in there and that option as well as other options are explained in the topic so hopefully it helps you out. Smiley

    Thanks,

    Nick Pierson

Add Your 2 Cents