Microsoft Entra ID
AuthenticationSspr Howitworks
In brief
The documentation updates the section heading and setting label to “Allow password change after secure sign-in.”
What Entra admins need to know
Administrators following the article should use the revised wording when locating this option.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
To use this feature, users need a Microsoft Entra ID P1 or P2 license.
EnableAllow password changes with passwordless authenticationchange after secure sign-in
By default, passwordless users can't change their password without entering their current password. To enable the experience, you need at least the Authentication Policy Administrator role.
- Sign in to the Microsoft Entra admin center.
- Browse to Entra ID > Authentication methods > Policies.
- Select Password, and then select Configure.
- Enable Allow
passwordlesspassword changein My Sign-insafter secure sign-in.. - Select Save.
The setting applies to all users in the tenant. You can't target or exclude individual users or groups.
@@ -71,14 +71,14 @@ This password change experience is separate from SSPR. Users don't need to be re To use this feature, users need a Microsoft Entra ID P1 or P2 license. -### Enable password changes with passwordless authentication+### Allow password change after secure sign-in By default, passwordless users can't change their password without entering their current password. To enable the experience, you need at least the [Authentication Policy Administrator](~/identity/role-based-access-control/permissions-reference.md#authentication-policy-administrator) role. 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com). 1. Browse to **Entra ID** > **Authentication methods** > **Policies**. 1. Select **Password**, and then select **Configure**.-1. Enable **Allow passwordless password change in My Sign-ins**.+1. Enable **Allow password change after secure sign-in.** 1. Select **Save**. The setting applies to all users in the tenant. You can't target or exclude individual users or groups.