SSPR (Self-Service Password Reset) is a feature that allows users to reset their passwords themselves, without the intervention of an IT administrator.

SSPR simplifies password management for administrators and users, reduces IT support costs and improves employee productivity. What's more, it enhances security by encouraging users to change their passwords regularly, and by minimizing the risks associated with identity theft or brute-force attacks.

IT administrators configure SSPR in Azure AD by defining policies and selecting authentication methods to verify user identity (e.g. telephone number, personal e-mail address or security questions).

When a user forgets their password or needs to reset it, they can use the Azure AD web portal or the Windows login screen to initiate the password reset process.

The user must provide the authentication information required by the policies defined by the administrator (for example, answer a security question or enter a code received by SMS).

Once the user's identity has been verified, he or she can set a new password to access resources and applications.