How to track self-service password resets in Microsoft Entra ID

Self-service password reset (SSPR) is a feature in modern identity and access management systems that allows users to reset their passwords without IT administration intervention. It typically involves several steps to ensure that the user's identity is verified before they are allowed to reset their passwords. When users initiate a password reset, they are prompted to verify their identity using preconfigured authentication methods. This reduces IT workload and improves user productivity by enabling users to quickly regain access to their accounts when passwords are forgotten or compromised. Users in Microsoft Entra ID can perform self-service password resets using the Microsoft Entra self-service password reset portal.

Why do we need to track self-service password resets in Microsoft Entra ID

Monitoring password reset activity can uncover suspicious patterns, such as multiple failed attempts, resets from unusual locations, or a sudden surge in resets for specific user groups. These indicators could signal potential security breaches or compromised accounts. Keeping records of password resets helps in audits and investigations by providing a detailed trail of user activity. You can track the self-service password resets by users in Microsoft Entra ID with audit logs and with the reporting feature in M365 Manager Plus.

The table is a comparison of how to track self-service password resets using Microsoft Entra admin center and M365 Manager Plus.

Limitations of using the Microsoft Entra admin center to track self-service password resets

• Administrators need to be assigned at least the Reports Reader role to access the reports in Microsoft Entra ID.
• The built-in reporting features in Microsoft Entra admin center may not offer the level of detail or customization, making it challenging to create tailored reports that meet specific needs.
• Accessing and navigating through the audit logs in Microsoft Entra admin center can be cumbersome, especially for administrators who are not familiar with the interface.
• Interpreting logs in the Microsoft Entra admin center is challenging due to limited filtering options, complex formats, and poor search functionality.

Benefits of using M365 Manager Plus to track self-service password resets

• M365 Manager Plus offers flexible role-based access control, allowing administrators to assign customized roles and permissions to help desk technicians, providing ease of access to reports without being restricted to predefined roles like in Microsoft Entra ID.
• M365 Manager Plus provides advanced and customizable reporting features, enabling administrators to create detailed reports tailored to specific requirements, and also offers scheduled report generation.
• It provides an intuitive and user-friendly interface, reducing the learning curve for administrators and improving efficiency in managing and analyzing password resets.
• With advanced filtering and search capabilities, M365 Manager Plus allows for comprehensive reporting and monitoring of all aspects of Microsoft Entra ID from a single console.