Microsoft Entra ID
AuthenticationSspr Howitworks
In brief
The page now labels the section “Allow password change after secure sign-in” and its subsection “Enable the setting,” replacing the previous “Passwordless authentication” heading.
What Entra admins need to know
Administrators should use the updated section names when navigating the documentation.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
[!div class="nextstepaction"] Tutorial: Enable self-service password reset (SSPR)
Passwordless authenticationAllow password change after secure sign-in.
Passwordless users can change their cloud password from Security info without knowing or entering their current password. Before they create a new password, they sign in with one of the following passwordless methods:
To use this feature, users need a Microsoft Entra ID P1 or P2 license.
Allow password change after secure sign-in.Enable the setting
By default, passwordless users can't change their password without entering their current password. To enable the experience, you need at least the Authentication Policy Administrator role.
@@ -57,7 +57,7 @@ To get started with SSPR, complete the following tutorial: > [!div class="nextstepaction"] > [Tutorial: Enable self-service password reset (SSPR)](tutorial-enable-sspr.md) -## [**Passwordless authentication**](#tab/passwordless)+## [**Allow password change after secure sign-in.**](#tab/secure-sign-in) Passwordless users can change their cloud password from **Security info** without knowing or entering their current password. Before they create a new password, they sign in with one of the following passwordless methods: @@ -71,7 +71,7 @@ This password change experience is separate from SSPR. Users don't need to be re To use this feature, users need a Microsoft Entra ID P1 or P2 license. -### Allow password change after secure sign-in.+### Enable the setting By default, passwordless users can't change their password without entering their current password. To enable the experience, you need at least the [Authentication Policy Administrator](~/identity/role-based-access-control/permissions-reference.md#authentication-policy-administrator) role.