Microsoft Entra ID
AuthenticationSspr Howitworks
In brief
The documentation now states that rollout across all clouds begins in late October 2026 and is expected to finish by the end of November 2026.
What Entra admins need to know
If the setting is not visible in a tenant, administrators should account for the rollout not having reached it yet.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Allow password change after secure sign-in.
Passwordless users can change their cloud password from Security info without knowing or entering their current password. Before they create a new password, they sign in with one of the following passwordless methods:
Microsoft Entra certificate-based authentication (CBA).
Passwordless users can change their cloud password from Security info without knowing or entering their current password. Before they create a new password, they sign in with one of the following passwordless methods:
- Microsoft Entra certificate-based authentication (CBA).
@@ -59,6 +59,9 @@ To get started with SSPR, complete the following tutorial: ## [**Allow password change after secure sign-in.**](#tab/secure-sign-in) +> [!NOTE]+> This feature rolls out across all clouds starting in late October 2026, with rollout expected to complete by the end of November 2026. If you don't see the setting in your tenant, the rollout might not have reached your tenant yet.+ Passwordless users can change their cloud password from **Security info** without knowing or entering their current password. Before they create a new password, they sign in with one of the following passwordless methods: * Microsoft Entra certificate-based authentication (CBA).