Azure Self-Service Password Reset

Self-service password reset for users: The feature lets users reset their own forgotten or expired passwords through a web portal after verifying their identity, eliminating help desk calls for routine password problems and restoring access quickly.

Self-service account unlock: In addition to resetting passwords, users can unlock their own locked accounts after verification, resolving lockouts without administrator intervention.

Multiple verification methods (email, phone, security questions, authenticator app): Identity is confirmed during a reset using a configurable set of methods including alternate email, mobile phone (call or SMS), office phone, security questions, and the Authenticator app, with administrators controlling which and how many are required.

Password writeback to on-premises Active Directory: For hybrid environments, password changes made in the cloud are written back to on-premises Active Directory so that the user's on-prem and cloud passwords stay synchronized after a self-service reset.

Registration enforcement policies: Administrators can require users to register their authentication methods (for example at next sign-in) so that every account is prepared to perform a self-service reset before one is needed.