Microsoft Azure Self-Service Password Reset enables users to reset their own forgotten passwords and unlock their accounts through a web portal. To verify their identity, users must provide one or more administrator-configured authentication methods, such as a mobile app notification, SMS code, phone call, alternate email, or answers to security questions. Administrators can set policies defining the number of methods required for registration and reset, enforce user registration, and customize available security questions. The service integrates registration with multi-factor authentication, provides reporting and audit logs for all reset and registration activity, and sends notifications to users and administrators upon password changes. For hybrid environments, it also supports password writeback to synchronize changes with an on-premises Active Directory.
