how to enable self-service password reset

Hello Vill Sivoravong,

It sounds like you are having issues setting up the Microsoft Entra self-service password reset (SSPR).

• Currently, Microsoft is recommending this video on "How to enable and configure SSPR in Microsoft Entra ID https://www.youtube.com/watch?v=rA8TvhNcCvQ
• We also have a video for IT Administrators on "Resolving the six most common end-user error messages with SSPR" https://www.youtube.com/watch?v=9RPrNVLzT8I

Find more information at this Microsoft Learn site https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr

Hi @Vill Sivoravong ,

Thank you for raising question to Microsoft Q&A.

According to this issue, may I know if you could try to turn on the options in Self-service password reset (SSPR) in Entra Admin Center as Global Administrator role?

Please provide a screenshot so I could better understand your issue to provide accurate troubleshooting steps. Here are some insights I could think of right now.

1. Change the browser or clear the cache of current browser you are using to access to Entra Admin Center by following this article: https://support.microsoft.com/en-us/windows/clear-browsing-history-e81687d2-8ff0-4573-bb6e-23597cfd8819
2. Use PowerShell and Microsoft Graph to try to enable SSPR to see what the error message could be.

For PowerShell and connect to Microsoft Graph via this article: https://learn.microsoft.com/en-us/microsoft-365/enterprise/connect-to-microsoft-365-powershell?view=o365-worldwide

then run these commands:

Connect-MgGraph -Scopes "Policy.ReadWrite.Authorization"
Import-Module Microsoft.Graph.Identity.SignIns
$params = @{allowedToUseSSPR = $true}
Update-MgPolicyAuthorizationPolicy -BodyParameter $params

Reference for this: https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.identity.signins/update-mgpolicyauthorizationpolicy?view=graph-powershell-1.0#example-4-enable-default-user-role-to-use-self-serve-password-reset-feature

Please try this and let me know if you have any updates.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Hello Andrew Taylor,

It sounds like you're working on configuring SSPR for your users, but encountering a failure during setup. To assist you effectively, Microsoft has provided helpful resources that walk through both the setup process and common troubleshooting steps.

• How to Enable and Configure SSPR in Microsoft Entra ID: https://www.youtube.com/watch?v=rA8TvhNcCvQ
• Resolving the Six Most Common End-User Error Messages with SSPR: https://www.youtube.com/watch?v=9RPrNVLzT8I

Quick Checklist to Enable SSPR

• Ensure you have the correct license (e.g., Microsoft 365 Business Premium or Azure AD Premium P1/P2).
• Go to Microsoft Entra admin center → Identity → Users → Password reset.

Enable SSPR for all users or selected groups.

• Configure at least one authentication method (e.g., mobile phone, email).
• Save and test using https://aka.ms/sspr.

For more information, please visit here: https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr

If I have answered your question, please accept this answer as a token of appreciation and don't forget to give a thumbs up for "Was it helpful" and "Accept the answer"!

Best regards,