Key points

• Enabled for all users or selected groups at tenant scope.
• Requires users to register enough authentication methods permitted by policy.
• Reset behavior depends on account type, registration state, and configured methods.

Best-known use cases

• Reduce help-desk password reset work.
• Let a pilot group prove the reset experience before wider rollout.

What candidates often confuse it with

• SSPR enablement vs registration: policy eligibility vs a user having usable methods.
• Password reset vs account authorization: restore sign-in credential vs grant access to resources.

Key takeaway

Enable SSPR for the intended population and verify method policy plus user registration.

Related services

• Microsoft Entra ID
• Microsoft Entra External ID

Relevant exam tasks

• D1.1.S1 — Create users and groups
• D1.1.S2 — Manage user and group properties
• D1.1.S3 — Manage licenses in Microsoft Entra ID
• D1.1.S4 — Manage external users
• D1.1.S5 — Configure self-service password reset (SSPR)

Learn more

• Self-service password reset documentation